|
osdir.com mailing list archive |
|
Subject: Re: Tools/Techniques for recovering "rm"'d files - msg#00233List: macosx.adminI've recently lost some very useful data due to "rm -rf *" in the wrong directory, and I'd like to get as much of it back as possible. I'm sure that "rm" doesn't zero out the bytes, but I'm having a heck of a time recovering anything. I've tried both Norton Utilities and Prosoft's Data Rescue X, but it looks like it's recovering files that were emptied from the trash, not anything RM'd. I've found references to some unix utilities like unrm and lazarus -- but does anybody know if there are OSX builds of these tools? (No luck looking on Fink.) The Coroner's Tool Kit is the source for these utilities. There is no reference to a Mac OS X build, but it has been tested on FreeBSD, OpenBSD and BSD, and is at least partly perl based (I've only run it under Solaris, and I can't remember its precise makeup). The website is at <http://www.antioffline.com/TCT/>. There is also a walkthrough available on the site. Another idea is to somehow make a dump of my entire volume (perhaps using disk copy to make a disk image) and then searching through the file for familiar text patterns -- unfortunately, it's a 5 gig volume, so that's a lot of wasted space and time! This is essentially what unrm and lazarus do, but they attempt to make the searching easier..... Cheers, Joel -- Joel Smith 22 Springfield Way Pateley Bridge Tel: +44 1423 711229 Mobile: +44 7768 803758 N.Yorks HG3 5PA Fax: +44 870 1617192 Thread at a glance:
Previous Message by Date: click to view message previewRe: how to start a shell script on loginThere is the LoginHook for the loginwindow where one can hook on some script or application to be executed at user login. Information is found at http://developer.apple.com/techpubs/macosx/Essentials/SystemOverview in the Chapter "Booting and Loggin In", Section "Customization Techniques", Subsection "Customizing Login and Logout Procedures". Lutz. Next Message by Date: click to view message previewRe: how to start a shell script on loginI'm sorry for the inconvenience caused by me only posting the pointer without a summary. For a quick accesss I cite the relevant information from the referred page. [From Inside Mac OS X: System Overview at http://developer.apple.com/techpubs/macosx/Essentials/SystemOverview Chapter "Booting and Loggin In", Section "Customization Techniques", Subsection "Customizing Login and Logout Procedures"] To use the loginwindow hooks, you must modify the code for launching loginwindow found in /etc/ttys. In this file is the following line: console "/System/Library/CoreServices/loginwindow.app/loginwindow" vt100 on secure window=/System/Library/CoreServices/WindowServer onoption="/usr/libexec/getty std.9600" This line tells the init program to launch loginwindow on the console terminal and to use WindowServer (which is a symbolic link to the Window Manager process) as the windowing-system process. Into this line, you can insert additional parameters for loginwindow to process. Table 4-4 lists the parameters currently supported by loginwindow. Parameter Description of value -LoginHook The full path to a script or tool to run when a user successfully logs in. -LogoutHook The full path to a script or tool to run when a user successfully logs out. -PowerOffDisabled If YES, the Shut Down and Restart buttons in the login window are disabled; also, pressing the computers power button quits the Finder and Dock applications but does not turn off the system. This feature prevents users from casually powering down a system that provides some shared service, such as a print server or file server. Table 4-4 loginwindow parameters The -LoginHook and -LogoutHook parameters are particularly useful because they permit custom administrative, accounting, or security programs to run as part of the login and logout procedures. For example, your modified console definition in /etc/ttys might look similar to the following: console "/System/Library/CoreServices/loginwindow.app/loginwindow -PowerOffDisabled YES -LoginHook /Users/Administrator/Scripts/mailLoginToAdmin" vt100 on secure window=/System/Library/CoreServices/WindowServer onoption="/usr/libexec/getty std.9600" [End cited documentation] Lutz. Previous Message by Thread: click to view message previewTools/Techniques for recovering "rm"'d filesI've recently lost some very useful data due to "rm -rf *" in the wrong directory, and I'd like to get as much of it back as possible. I'm sure that "rm" doesn't zero out the bytes, but I'm having a heck of a time recovering anything. I've tried both Norton Utilities and Prosoft's Data Rescue X, but it looks like it's recovering files that were emptied from the trash, not anything RM'd. I've found references to some unix utilities like unrm and lazarus -- but does anybody know if there are OSX builds of these tools? (No luck looking on Fink.) Another idea is to somehow make a dump of my entire volume (perhaps using disk copy to make a disk image) and then searching through the file for familiar text patterns -- unfortunately, it's a 5 gig volume, so that's a lot of wasted space and time! Any suggested tools or techniques would be welcome. Next Message by Thread: click to view message previewRe: Tools/Techniques for recovering "rm"'d files--On Wednesday, December 11, 2002 11:10 +0000 Joel Smith <joel-BjjWmaUEk86TY6FTCsQk+9Bc4/FLrbF6@xxxxxxxxxxxxxxxx> wrote: At 10:33 pm -0800 10/12/02, Dan Wood wrote: [...] I've found references to some unix utilities like unrm and lazarus -- but does anybody know if there are OSX builds of these tools? The Coroner's Tool Kit is the source for these utilities. There is no reference to a Mac OS X build, but it has been tested on FreeBSD, OpenBSD and BSD, and is at least partly perl based (I've only run it under Solaris, and I can't remember its precise makeup). Will such UNIX "undelete" utilities work on non-UFS filesystems? -sjk Loading Comments...
|
|
