trying to fix

This commit is contained in:
Chris Cochrun 2022-01-03 12:41:35 -06:00
parent fa407dfeb6
commit e013d7569e
22945 changed files with 447936 additions and 0 deletions

View file

@ -0,0 +1 @@
<!-- SC_OFF --><div class="md"><p>I have an ext4 filesystem. An important directory with its file have been overwritten by a &#39;more recent&#39; one despite the older file being more up to date, and I am trying to recover the previous version. ext4magic in live system does find an inode corresponding to the directory overwritten (I suppose the filesystem just delinked the inode and relinked it with the new data), however since it has not been deleted in the journal, it refuse to restore it and consider everything fine - but it is not.</p> <p>Is there any other tool that may recover the directory and its file from the directory inode number ? (Since I have it with ext4magic). Is there any other forensic tool that may be of help ?</p> <p>Note : I shutdown quickly after the error and right now I am doing a copy of the block in the live system, so the image is preserved.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/TheSleepyMachine"> /u/TheSleepyMachine </a> <br/> <span><a href="https://www.reddit.com/r/archlinux/comments/qyi1rj/recover_overwritten_directory/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/archlinux/comments/qyi1rj/recover_overwritten_directory/">[comments]</a></span>