Recovering Deleted Files With lsof Jun 1, 2009, 20 :04 UTC (1 Talkback[s]) (5928 reads) (Other stories by Juliet Kemp)
"A file in Linux is a pointer to an inode, which contains the file data (permissions, owner and where its actual content lives on the disk). Deleting the file removes the link, but not the inode itself -- if another process has it open, the inode isn't released for writing until that process is done with it."
