linux-kernel - Re: Help to edit inode content

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <ea11fea30905122128y5f72e6at49ad95d89480bb01@mail.gmail.com>
Date:	Wed, 13 May 2009 09:58:59 +0530
From:	Manish Katiyar <mkatiyar@...il.com>
To:	ranjith kannikara <ranjithkannikara@...il.com>
Cc:	Andreas Dilger <adilger@....com>, Bryan Donlan <bdonlan@...il.com>,
	linux-kernel@...r.kernel.org, linux-ext4@...r.kernel.org
Subject: Re: Help to edit inode content

On Wed, May 13, 2009 at 9:53 AM, ranjith kannikara
<ranjithkannikara@...il.com> wrote:
> On Wed, May 13, 2009 at 9:44 AM, Manish Katiyar <mkatiyar@...il.com> wrote:
>> On Wed, May 13, 2009 at 9:41 AM, ranjith kannikara
>> <ranjithkannikara@...il.com> wrote:
>>> On Wed, May 13, 2009 at 1:33 AM, Andreas Dilger <adilger@....com> wrote:
>>>> On May 12, 2009  21:32 +0530, ranjith kannikara wrote:
>>>>> On Tue, May 12, 2009 at 9:26 PM, Bryan Donlan <bdonlan@...il.com> wrote:
>>>>> > On Tue, May 12, 2009 at 11:47 AM, ranjith kannikara
>>>>> > <ranjithkannikara@...il.com> wrote:
>>>>> >> I am a computer science engineering student. We have started a project
>>>>> >> to make an application to recover deleted files from an ext3
>>>>> >> filesystem. For that we have a doubt . Can we edit the inode content?
>>>>> >> ie the recovery will be robust if we could edit the inode contents and
>>>>> >> give the pointer address manually or through a code. The inode is
>>>>> >> being created in the kernel mode and is it possible to edit those
>>>>> >> contents if the code is allowed to have the kernel mode permissions..?
>>>>>
>>>>> But we would like to know whether it is possible to edit the inode
>>>>> because it will make the recovery easy and robust. ie he know the
>>>>> details of the inode of the file which had been deleted is it possible
>>>>> to edit the content of that inode with the pointers of the deleted
>>>>> file.?
>>>>
>>>> Are you asking whether it is possible to modify the on-disk structure
>>>> of the ext3 inode? Generally that is NOT allowed because it will of
>>>> course break all existing filesystems if not done with extreme care.
>>>>
>>>> Cheers, Andreas
>>>> --
>>>> Andreas Dilger
>>>> Sr. Staff Engineer, Lustre Group
>>>> Sun Microsystems of Canada, Inc.
>>>>
>>>>
>>> Hi,
>>> Actually I was asking the same. whether it is possible to edit the
>>> inode content of a disk or the image of a disk. Did you mean that it
>>> is not possible at all. Is there any method to edit the inode content
>>> and use the edited inode for a file, If we can ensure high care.
>>> because such a method will be the most robust one in the recovery of
>>> deleted file.
>>
>> Sorry , but it is still not clear to me whether you are trying to
>> change the on-disk structure of the inode or just change the ondisk
>> *contents* of some deleted inode to recover it.  Can you give an
>> example of what you are trying to do ?
>>
>> Thanks -
>> Manish
>>
> Ok, I will
> I want to edit the contects of some deleted inode to recover the file. ie
> I have a file 'foo' with inode 123. and the inode have the direct and
> indirect data pointers in it.
> Now i deleted the file and is trying to recover it.
> I somehow could get what was the content,which is the pointers in the inode.
> Now I would like to edit the inode 123 so that it will contain the
> above pointers and will be the same deleted file itself.

Ok... then it is not what Andreas is concerned about. You should be
able to change it using the debugfs tool. See the command
"modify_inode" in it.

Thanks -
Manish



>
> I hope now its clear and you can help me.
> Regards
> Ranju.
>>
>>
>>>
>>> Regards
>>> ranju.
>>>
>>> --
>>> http://www.ranjithkannikara.blogspot.com/
>>> --
>>> To unsubscribe from this list: send the line "unsubscribe linux-ext4" in
>>> the body of a message to majordomo@...r.kernel.org
>>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>>
>>
>>
>>
>> --
>> Thanks -
>> Manish
>>
>
>
>
> --
> http://www.ranjithkannikara.blogspot.com/
>



-- 
Thanks -
Manish
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/