Recovering Deleted Files With lsof
Jun 01, 2009, 20:04 (1 Talkback[s])
(Other stories by Juliet Kemp)
"A file in Linux is a pointer to an inode, which contains the
file data (permissions, owner and where its actual content lives on
the disk). Deleting the file removes the link, but not the inode
itself -- if another process has it open, the inode isn't released
for writing until that process is done with it."
Complete
Story
Related Stories:
