linux-ext4 - Re: fsck ate my ext4 home partition, help!?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 4 May 2009 22:33:05 -0700 (PDT)
From:	Christian Kujau <lists@...dbynature.de>
To:	Marcel Partap <mpartap@....net>
cc:	linux-ext4@...r.kernel.org
Subject: Re: fsck ate my ext4 home partition, help!?

On Mon, 4 May 2009, Marcel Partap wrote:
> check over it. Unmounting went successful, however fsck complained about 
> /dev/sdd4 still being mounted. After confirming (lsof, mtab, empty mount 

Have you checked /proc/mounts? mtab could be stale, lsof not seeing 
everything and the "empty mountpoint" could be some other mount on top of 
/home.

> previous run of e2fsck with the -n was showing a bunch of stuff to fix, 

Do you still have that e2fsck output?

> revealed the havoc that was done: ls -laR showed abundant I/O errors, 

Again: error messages would be helpful.

> If someone can actually help me to get it back in the state it was
> before invoking e2fsk,

You did not take the dd image before the first e2fsck, hm? Now that you 
have a backup: a few days ago a tool called "extundelete"[0] has been 
annunced on ext3-users, maybe that can be of help recovering your fs.

> For the record, i am running kernel 2.6.30 RC3 with gentoo's 
> e2fsprogs-1.41.3.. and i have not rebooted the system since the incident 

e2fsprogs-1.41.5 has been released recently, you might want to give it a 
shot.

Christian.

[0] http://extundelete.sf.net/
-- 
Perfect Forward Secrecy is when Bruce Schneier whispers something in your ear.
--
To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html