Linux Ext2fs Undeletion mini-HOWTO

Aaron Crane

aaronc@pobox.com

JF Project - 擔杮岅栿

JF@linux.or.jp

v1.3, 2 February 1999

師偺傛偆側忬嫷傪憐憸偟偰傎偟偄丅偙偙 3 擔娫丄堸傑偢怘傢偡偱僔儍儚乕傕梺
傃偢偵嶌嬈傪懕偗丄傛偆傗偔偦偺梷偊偒傟側偄僴僢僉儞僌偺徴摦偑幚傪寢傫偩
丅偮偄偵丄僾儘僌儔儉偑姰惉偟偨偺偩丅悽奅揑側徿巀偲柤惡傪傕偨傜偡偩傠偆
傎偳偺丅偁偲偼 tar 偱偐偨傔偰丄Metalab 偵偁偘傞偩偗偩丅偍偭偲丄Emacs 偺
僶僢僋傾僢僾僼傽僀儖偺嶍彍傪朰傟偰偄偨丅偙偙偱偁側偨偼丄rm * ~ 偲僐儅儞
僪傪懪偮丅偦偟偰丄歫屇丄僐儅儞僪偵梋寁側僗儁乕僗傪擖傟偰偟傑偭偨偙偲偵
婥晅偔偺偱偁傞丅悽婭偺堩昳傪嶍彍偟偰偟傑偭偨両偟偐偟丄枩嶔恠偒偨傢偗偱
偼側偄丅偙偺暥彂偼丄Ext2 僼傽僀儖僔僗僥儉忋偱嶍彍偟偰偟傑偭偨僼傽僀儖傪
暅媽偡傞曽朄偵偮偄偰夝愢偟偰偄傞丅偍偦傜偔丄嵟屻偵偁側偨偼偦偺僾儘僌儔
儉傪儕儕乕僗偱偒傞偼偢....

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

Table of Contents
1. 偼偠傔偵
   
    1.1. 峏怴楌
    1.2. 偙偺暥彂偺惓幃側岞奐応強
   
2. 僼傽僀儖傪岆偭偰嶍彍偟側偄偨傔偵偼
3. 偳偺掱搙偺暅媽棪偑尒崬傔傞偺偐丠
4. 偱偼丄偳偆傗偭偰暅媽偡傞偺偐丠
5. 僼傽僀儖僔僗僥儉偺儅僂儞僩夝彍
6. i-node 傪捈愙彂偒姺偊傞応崌偺弨旛
7. 暿偺応強偵僨乕僞傪彂偒弌偡応崌偺弨旛
8. 嶍彍偟偨 i-node 傪尒偮偗偩偡
9. i-node 偺徻嵶傪挷傋傞
10. 僨乕僞僽儘僢僋偺暅媽
   
    10.1. 彫偝側僼傽僀儖
    10.2. 戝偒側僼傽僀儖
   
11. i-node 傪捈愙偄偠傞
12. 彨棃揑偵偼傕偭偲娙扨偵側傞偱偟傚偆偐丠
13. 堦楢偺僾儘僙僗傪帺摦壔偡傞僣乕儖偼側偄偱偡偐丠
14. 偁偲偑偒
15. Credit 偲嶲峫暥專
16. 朄揑側帠暱
17. 擔杮岅栿偵偮偄偰

1. 偼偠傔偵

偙偺 mini-Howto 偼丄ext2 僼傽僀儖僔僗僥儉忋偱嶍彍偟偰偟傑偭偨僼傽僀儖傪
暅媽偡傞曽朄偵偮偄偰丄偦偺僸儞僩傪採嫙偟傛偆偲偡傞傕偺偱偡丅傑偨丄偦傕
偦傕僼傽僀儖傪岆偭偰嶍彍偟側偄傛偆偵偡傞偨傔偺梊杊嶔偵偮偄偰傕丄庒姳愢
柧偟偰偄傑偡丅

傕偪傠傫丄偨偭偨崱 rm 僐儅儞僪偱乽偪傚偭偲偟偨帠屘乿傪婲偙偟偰偟傑偭偨
恖偺偨傔偵丄偙偺暥彂偼栶偵棫偮偱偟傚偆丅偲偼偄偊丄偄偢傟偵偟偰傕懡偔偺
撉幰偵杮暥彂傪撉傫偱傕傜偄偨偄偲傕婅偭偰偄傑偡丅偄傑偼傑偩傢偐傜側偄偱
偟傚偆偑丄偁傞擔偙偺忣曬偑偁側偨偺媷抧傪媬偆偐傕偟傟側偄偺偱偡偐傜丅

偙偺暥彂偼丄撉幰偑 UNIX 僼傽僀儖僔僗僥儉慡斒偵偮偄偰偁傞掱搙抦偭偰偄傞
偙偲傪慜採偵偟偰偄傑偡偑丄晛抜 Linux 巊偭偰偄傞恖側傜偨偄偰偄堄枴偑暘偐
傞傛偆偵傕偟偨偮傕傝偱偡丅傕偟撉幰偑慡偔偺弶怱幰側傜丄Linux 忋偱偺僼傽
僀儖偺暅媽偵偼丄偝偟偁偨傝偐側傝偺媄弍揑抦幆偲擡懴偲偑梫媮偝傟偰偄傞偲
偄偆偙偲傪弎傋偰偍偒傑偡丅(栿拲丗The Linux Kernel <http://
www.linux.or.jp/JF/JFdocs/The-Linux-Kernel-10.html> 偵斾妑揑徻偟偄夝愢
偑偁傝傑偡丅)

ext2 僼傽僀儖僔僗僥儉忋偱偺嶍彍僼傽僀儖偺暅媽偵偼丄彮側偔偲傕偦偺僼傽僀
儖偑曐懚偝傟偰偄偨惗(raw)僨僶僀僗偵懳偡傞撉傒弌偟傾僋僙僗偑晄壜寚偱偡丅
堦斒偵偙偺偙偲偼 root 偱偺嶌嬈傪堄枴偟傑偡偑丄(Debian GNU/Linux <http:/
/www.debian.org/> 側偳偺) 僨傿僗僩儕價儏乕僔儑儞偺側偐偵偼丄disk 僌儖乕
僾偵強懏偟偰偄傞儊儞僶乕側傜丄偦偆偟偨僨僶僀僗偵傾僋僙僗偱偒傞傛偆偵側
偭偰偄傞傕偺傕偁傝傑偡丅 e2fsprogs 僷僢働乕僕偵偁傞 debugfs 傕昁梫偵側
傝傑偡偑丄偙偺儐乕僥傿儕僥傿偼偍巊偄偺僨傿僗僩儕價儏乕僔儑儞偵娷傑傟偰
偄傞偲巚偄傑偡丅

挊幰偑偙偺暥彂傪彂偄偨偺偼丄rm -r 偲偄偆側傫偲傕嬸偐偱攋夡揑側僐儅儞僪
傪 root 偱巊偭偰偟傑偭偨偲偄偆屄恖揑側宱尡偵桼棃偟偰偄傑偡丅97 屄偺
JPEG 僼傽僀儖傪嶍彍偟偰偟傑偭偨偺偱偡丅偙傟傜偼惀旕偲傕昁梫偱丄偐偮懠偐
傜嵞傃庢摼偡傞偺偼傎偲傫偳晄壜擻側戙暔偱偟偨丅偟偐偟丄(Section 15 偺復
偵偁傞) tips 傪巊偭偰偐側傝擲偭偨寢壥丄91 枃傪柍彎偱暅媽偱偒傑偟偨丅巆
傝偺夋憸偵偮偄偰傕丄 5 枃傑偱偼側傫偲偐庢傝栠偡偙偲偑偱偒傑偟偨 (奺乆偑
偳偆偄偆夋憸偐暘偐傞掱搙偺暅媽偱偟偨)丅嵟屻偺堦枃偩偗偼昞帵晄擻偱偟偨偑
丄偙傟偵偮偄偰傕忣曬寚棊傪 1024 僶僀僩埲壓掱搙偵偼偱偒偨偲巚偭偰偄傑偡
(偟偐偟晄塣偵傕寚棊偟偨忣曬偼僼傽僀儖偺愭摢晹暘偩偭偨偺偱偡丅 JFIF 僼傽
僀儖宍幃偵偮偄偰偼壗傕抦傜側偐偭偨摉帪偲偟偰偼丄弌棃傞偩偗偺偙偲偼傗偭
偨偺偱偡偑)丅

嶍彍僼傽僀儖偺暅媽棪偲偟偰丄偳偺掱搙偺抣傪婜懸偱偒傞偐偵偮偄偰偼偺偪傎
偳媍榑偡傞偮傕傝偱偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

1.1. 峏怴楌

偙偺暥彂偺岞幃儕儕乕僗偲偦偺儕儕乕僗擔偼丄埲壓偺偲偍傝偱偡丅

 丒 v1.0, 1997擭1寧18擔
   
 丒 v1.1, 1997擭7寧23擔 (Section 1.1.1 嶲徠)
   
 丒 v1.2, 1997擭8寧4擔 (Section 1.1.2 嶲徠)
   
 丒 v1.3, 1999擭2寧2擔 (Section 1.1.3 嶲徠)
   
劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

1.1.1. 僶乕僕儑儞 1.1 偱偺曄峏揰

僶乕僕儑儞 1.1 偱偺曄峏揰偼丄側偵傛傝傕丄僼傽僀儖暅媽偺椺戣偵偁偭偨挊幰
偺巚偄堘偄傪掶惓偟偨偙偲偱偡丅岆傝傪巜揈偟偰偔傟偨偡傋偰偺曽偵姶幱偟傑
偡丅僾儘僌儔儉偺憡屳嶌梡偵偮偄偰彂偔嵺偵偼丄傕偭偲怲廳偵側傠偆偲巚偄傑
偡丅

擇偮栚偼丄UNIX 僼傽僀儖僔僗僥儉偺儗僀傾僂僩偺愢柧傪彂偒捈偟偨偙偲偱偡丅
偙傟偵傛偭偰丄偍偦傜偔傛傝暘偐傝堈偔側偭偨偲巚偄傑偡丅傕偲傕偲帺暘偱傕
枮懌偟偰偼偄側偐偭偨偺偲丄暋悢偺曽偐傜偺僐儊儞僩偱傕晄柧椖偲偺巜揈傪偄
偨偩偄偰偄偨偐傜偱偡丅

嶰偮栚偼丄暥彂偺拞掱偵 uuencode 偟偨 fsgrab 偺 gzip tarball 偑偁偭偨偺
傪嶍彍偟偨偙偲偱偡丅偙偺僾儘僌儔儉偼丄尰嵼挊幰偺僂僃僽僒僀僩 <http://
pobox.com/~aaronc/tech/fsgrab-1.2.tar.gz> 傗 Metalab <http://
metalab.unc.edu/pub/Linux/utils/file/> (偍傛傃偦偺儈儔乕僒僀僩)偐傜擖庤
偱偒傑偡丅

巐偮栚偼丄偙偺暥彂偑 Linux Documentation Project 偺 SGML Tools 偵崌傢偣
偰 SGML 壔偝傟偨偙偲偱偡丅偙偺儅乕僋傾僢僾尵岅偼丄僗僋儕乕儞昞帵傗報嶞
偺曋媂偵墳偠偰丄(HTML 傗 LaTeX 側偳偺)懠偺暋悢偺儅乕僋傾僢僾尵岅傊傕娙
扨偵曄姺偱偒傑偡丅偙偺棙揰偺傂偲偮偼丄報嶞帪偺旤偟偄斉慻偑傛傝娙扨偵幚
尰偱偒傞偲偄偆偙偲偱偡丅傑偨僂僃僽忋偱墈棗偡傞応崌偵偼僋儘僗儕僼傽儗儞
僗傗僴僀僷乕儕儞僋偑巊偊傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

1.1.2. 僶乕僕儑儞 1.2 偱偺曄峏揰

偙偺夵掶偼丄偍傕偵崁栚偺捛壛偺偨傔偱偡丅庡偲偟偰丄撉幰偐傜偺採埬偵傛傞
曄峏偱偁傝丄偦偺傂偲偮偼摿偵廳梫側傕偺偱偡丅

戞堦偺曄峏売強偼丄Egil Kvalegerg <egil@kvalengerg.no> 偐傜偺採埬偱偡丅
斵偼丄debugfs 偺 dump 僐儅儞僪傪巜揈偟偰偔傟傑偟偨丅Egil丄偳偆傕偁傝偑
偲偆丅

戞擇偺曄峏売強偼丄廳梫側僼傽僀儖傪嶍彍偟偰偟傑傢側偄偨傔偵 chattr 僐儅
儞僪傪巊偆偲偄偆偙偲傪巜揈偟偨揰偱偡丅 Herman Suijs
<H.P.M.Suijs@kub.nl> 偐傜偺巜揈偱偡丅

暥彂偺 abstract 偑夵掶偝傟傑偟偨丅偄偔偮偐偺慻怐偲僜僼僩僂僃傾偵娭偡傞
URL 傕捛壛偟傑偟偨丅(typo 偺掶惓傪娷傓)奺庬儅僀僫乕側曄峏傕偁傝傑偟偨丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

1.1.3. 僶乕僕儑儞 1.3 偱偺曄峏揰

嵟弶偺儕儕乕僗偐傜 17 僇寧宱偪傑偟偨偑丄怴偟偄捛壛帠崁偼傎偲傫偳偁傝傑
偣傫丅崱夞偼丄彫偝側娫堘偄傪偄偔偮偐廋惓偟偨偩偗偱偡(typo 傗儕儞僋愗傟
摍丄-- 摿偵丄Open Group 傊偺儕儞僋偑側偐偭偨偙偲偺廋惓側偳)丅偦偟偰丄僇
乕僱儖僶乕僕儑儞傗 lde 偺僶乕僕儑儞側偳偁傑傝偵傕屆偔側偭偨婰弎傪堦晹峏
怴偟傑偟偨丅偦傟偲丄"Sunsite" 傪 "Metalab" 偵曄峏偟傑偟偨丅

偙偺儕儕乕僗偼丄僶乕僕儑儞 2.0 偵側傞慜偺嵟屻偺儕儕乕僗偩偲峫偊偰偄傑偡
丅2.0 偼丄姰慡側 HOWTO 暥彂偵側傞偼偢偱偡丅儊僕儍乕僶乕僕儑儞斣崋偺孞傝
忋偘偵傆偝傢偟偄廩暘側夝愢傪壛偊傜傟傞傛偆丄栚壓嶌嬈拞偱偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

1.2. 偙偺暥彂偺惓幃側岞奐応強

偙偺暥彂偺嵟怴偺岞奐僶乕僕儑儞偼丄昁偢師偺応強(偍傛傃偦偺儈儔乕僒僀僩)
偵宖嵹偡傞梊掕偱偡丅

Linux Documentation Project <http://www.linuxdoc.org/>

傑偨丄嵟怴斉偼丄挊幰偺僂僃僽僒僀僩 <http://pobox.com/~aaronc/>偵傕奺庬
僼僅乕儅僢僩偱宖嵹偝傟偰偄傑偡丅

 

 丒 SGML 僜乕僗 <http://pobox.com/~aaronc/tech/e2-undel/howto.sgml>丅偙
    傟偼丄挊幰偑 SGML Tools 僷僢働乕僕傪巊偭偰彂偄偨偙偺暥彂偺僜乕僗僼
    傽僀儖偱偡丅
   
 丒 HTML <http://pobox.com/~aaronc/tech/e2-undel/html/>丅偙傟偼丄SGML
    僜乕僗偐傜帺摦揑偵惗惉偝傟傞 HTML 僶乕僕儑儞偱偡丅
   
 丒 Plain text <http://pobox.com/~aaronc/tech/e2-undel/howto.txt>丅偙傟
    傕丄SGML 僜乕僗偐傜帺摦揑偵惗惉偝傟傞僥僉僗僩僶乕僕儑儞偱偡丅
   
 

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

2. 僼傽僀儖傪岆偭偰嶍彍偟側偄偨傔偵偼

僼傽僀儖偺暅媽偲偄偆揰偵娭偟偰丄Linux 偼 MS-DOS 偲偼彑庤偑堘偆偲偄偆偙
偲傪傑偢娞偵柫偠偰偔偩偝偄丅MS-DOS (偍傛傃偦偺埆杺偺巕偱偁傞 Windows
95) 偺応崌丄堦斒偵僼傽僀儖偺暅媽偼偐側傝娙扨偱偡丅暅媽張棟傪帺摦偱峴偆
儐乕僥傿儕僥傿偑丄僆儁儗乕僥傿儞僌僔僗僥儉 (傑偁丄挊幰偼偙偺梡岅傪峀媊
偺堄枴偱巊偆傢偗偱偡偑) 偵晅懏偟偰偄傞偐傜偱偡丅偟偐偟丄Linux 偺応崌丄
偦偆偼偄偒傑偣傫丅

廬偭偰丄儖乕儖 No.1 (偦偆尵偄偨偗傟偽乽惞側傞惥偄乿) 偼

    揝懃: 僶僢僋傾僢僾傪庢傞傋偟
   
偡側傢偪丄壗偱偁傟丄僶僢僋傾僢僾傪庢傞傛偆偵偡傞偙偲丅偡傋偰偺僨乕僞偑
懳徾偱偡丅挊幰摨條丄撉幰偺僐儞僺儏乕僞偵偼儊乕儖偦偺懠偺岎怣婰榐傗僾儘
僌儔儉丄奺庬暥彂側偳丄挿擭偵搉傞忣曬偑戝検偵拁愊偝傟偰偄傞偼偢偱偡丅傕
偟傕撍敪揑側僨傿僗僋忈奞偑婲偙偭偨傝丄偁傞偄偼(墢婲偱傕側偄偱偡偑)埆堄
傪帩偭偨僋儔僢僇乕偵僨傿僗僋偺撪梕傪徚嫀偝傟偰偟傑偭偨傝偟偨応崌丄擔忢
惗妶偑偳傟傎偳崿棎偡傞偐傪峫偊偰傒偰偔偩偝偄丅寛偟偰偁傝摼側偄偙偲偱偼
偁傝傑偣傫丅尰偵丄挊幰偼傑偝偵偦偆偟偨忬嫷偵娮偭偨懡偔偺恖偨偪偲儊乕儖
偺傗傝庢傝傪偟偰偒傑偟偨丅尗柧側 Linux 儐乕僓偼丄崱偡偖揔摉側僶僢僋傾僢
僾僨僶僀僗傪攦偭偰偒偰丄揔愗側僶僢僋傾僢僾僗働僕儏乕儖傪棫偰偨忋偱丄偦
傟傪尩庣偡傞傛偆偍偡偡傔偟傑偡丅挊幰帺恎偼丄僒僽儅僔儞忋偺梋偭偨僨傿僗
僋傪巊偭偰丄僀乕僒僱僢僩宱桼偱儂乕儉僨傿儗僋僩儕傪掕婜揑偵儈儔乕偡傞傛
偆偵偟偰偄傑偡丅僶僢僋傾僢僾僗働僕儏乕儖偺棫偰曽偵娭偡傞徻嵶偼丄Frish
(1995) 傪偛棗壓偝偄 ( Section 15 嶲徠)丅

偱偼丄僶僢僋傾僢僾傪偟偰偄側偄応崌偼丄偳偆偡傋偒偱偟傚偆偐丠 (偁傞偄偼
僶僢僋傾僢僾偑偁偭偨偲偟偰傕丅廳梫側僨乕僞偵偮偄偰偼丄婔廳傕偺埨慡懳嶔
傪偲傞偙偲偼埆偄峫偊偱偼偁傝傑偣傫)

廳梫側僼傽僀儖偺僷乕儈僢僔儑儞偼 440 (偁傞偄偼偦傟傛傝尩偟偄抣) 偵偟傑
偟傚偆丅彂偒崬傒傪偱偒側偔偡傟偽丄 rm 僐儅儞僪偱嶍彍偡傞慜偵丄嶍彍傪偡
傞偐斲偐偺妋擣儊僢僙乕僕偑昞帵偝傟傞傛偆偵側傝傑偡丅(偨偩丄挊幰偺応崌丄
偦傟偱傕 rm -r 僐儅儞僪偱僨傿儗僋僩儕撪傪嵞婣揑偵嶍彍偡傞嵺偵偼丄嵟弶偺
妋擣昞帵偺抜奒偱僾儘僌儔儉傪掆巭偝偣偰丄rm -rf 僐儅儞僪傪懪偭偰偟傑偭偨
傝偟傑偡丅)

摿暿側僼傽僀儖偵娭偟偰偼丄塀偟僨傿儗僋僩儕偵僴乕僪儕儞僋傪嶌惉偡傞偺傕
傛偄曽朄偱偡丅偙傟偼丄偁傞僔僗僥儉娗棟幰偐傜暦偄偨榖偱偡偑丄斵偼 /etc/
passwd 僼傽僀儖傪壗搙偐岆偭偰嶍彍偟偨偙偲偑偁偭偨偦偆偱偡 (偙傟偼僔僗僥
儉偵傎傏攋夡揑側僟儊乕僕傪梌偊傑偡)丅偦傟偵懳偡傞懳張曽朄偺傂偲偮偼丄埲
壓偺傛偆側傕偺偩偭偨偦偆偱偡 (偙傟偼 root 偱幚峴偟傑偡)丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # mkdir /.backup                                                  劆
劆  # ln /etc/passwd /.backup                                         劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙偆偟偰偍偔偲丄僼傽僀儖偺撪梕傪姰慡偵徚嫀偡傞偺偑偐側傝柺搢偵側傝傑偡
丅傕偟師偺傛偆側僐儅儞僪傪幚峴偟偨偲偟偰傕丄

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # rm /etc/passwd                                                  劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偦偺嵺偵偼丄

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # ln /.backup/passwd /etc                                         劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偲偡傟偽丄僼傽僀儖傪暅媽偱偒傑偡丅傕偪傠傫丄僼傽僀儖傪忋彂偒偟偰偟傑偆
偲偙偺曽朄偼栶偵棫偨側偄偺偱丄偄偢傟偵偟偰傕僶僢僋傾僢僾偼昁梫偱偡丅

ext2 僼傽僀儖僔僗僥儉忋偱偼丄ext2 偺懏惈傪棙梡偟偰僼傽僀儖傗僨傿儗僋僩
儕傪曐岇偡傞偙偲偑偱偒傑偡丅偙偺懏惈偺憖嶌偵偼 chattr 僐儅儞僪傪巊偄傑
偡丅懏惈偵偼傑偢丄乽捛壛偺傒壜擻(append-only)乿懏惈偲偄偆偺偑偁傝傑偡丅
偙偺懏惈偑晅偄偨僼傽僀儖偼丄撪梕偺捛壛偼壜擻偱偡偑丄嶍彍偑弌棃側偔側傝
丄婛懚偺撪梕傪忋彂偒偡傞偙偲傕偱偒側偔側傝傑偡丅僨傿儗僋僩儕偵偙偺懏惈
偑晅偄偰偄傞応崌偼丄偦偺僨傿儗僋僩儕撪偺僼傽僀儖傗僒僽僨傿儗僋僩儕偼丄
捠忢捠傝曄峏偼壜擻偱偡偑丄僼傽僀儖偺嶍彍偑弌棃側偔側傝傑偡丅乽捛壛偺傒
壜擻乿懏惈偼丄師偺傛偆偵愝掕偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  $ chattr +a 僼傽僀儖柤                                            劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

傑偨丄乽曄峏晄壜(immutable)乿懏惈偲偄偆偺傕偁傝丄偙傟偼 root 尃尷偱偺傒
愝掕傗夝彍偑偱偒傞傛偆偵側偭偰偄傑偡丅偙偺懏惈偑晅偄偨僼傽僀儖傗僨傿儗
僋僩儕偼丄曄峏丄嶍彍丄柤慜偺曄峏丄(僴乕僪)儕儞僋偺嶌惉偑晄壜擻偵側傝傑
偡丅愝掕偼丄師偺傛偆偵偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # chattr +i 僼傽僀儖柤                                            劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

ext2fs 偵偼丄偝傜偵乽嶍彍晄壜(undeletable)乿偲偄偆懏惈傕偁傝傑偡 (
chattr 偵 +u 傪晅偗偰愝掕偟傑偡)丅堄枴偡傞偲偙傠偼丄偙偺懏惈傪晅偗偨僼
傽僀儖偑嶍彍偝傟偨応崌丄幚嵺偵嵞棙梡偝傟傞偐偳偆偐偵娭傢傜偢丄堦扷埨慡
側応強偵堏摦偝傟丄堦掕婜娫宱夁屻偵嶍彍偝傟傞偲偄偆傕偺偱偡丅偨偩巆擮側
偙偲偵丄偙偺婡擻偼儊僀儞僗僩儕乕儉偺僇乕僱儖偵偼傑偩幚憰偝傟偰偄傑偣傫
丅夁嫀偵幚憰偝傟偐偗偨偙偲偼偁偭偨偺偱偡偑丄(挊幰偺抦傞尷傝) 尰嵼偺僇乕
僱儖偱偼傑偩棙梡壜擻偲偼側偭偰偄傑偣傫丅

rm 偼 rm -i 傊偺僄僀儕傾僗偲偡傞偐丄摨婡擻偺娭悢偵抲偒姺偊傞傋偒偩丄偲
庡挘偡傞恖傕偄傑偡 (rm -i 偼丄僼傽僀儖嶍彍偺嵺偵昁偢妋擣傪媮傔傑偡)丅幚
嵺偵 Red Hat <http://www.redhat.com/> 偼丄root 傪娷傓慡儐乕僓偵懳偟偰偙
偺婡擻傪僨僼僅儖僩偱愝掕偟偰偄傑偡丅偟偐偟丄挊幰偺屄恖揑側堄尒偱偼丄僜
僼僩僂僃傾偼柦椷捠傝拤幚偵摦偔傋偒偩偲巚偭偰偄傞偺偱丄偙偆偟偨尒夝偵偼
巀摨偱偒傑偣傫丅偙傟偵偼栤戣傕偁傝傑偡丅抶偐傟憗偐傟丄儐乕僓偼僔儞僌儖
丒儐乕僓儌乕僪偱婲摦偟偨傝丄暿偺僔僃儖傪巊偭偨傝丄堎側傞儅僔儞傪棙梡偟
偨傝偡傞偼偢偱偡偑丄偦偆偟偨応崌偵偼偙偺 rm 婡擻偼柍岠偵側傝傑偡丅嶍彍
妋擣偺昞帵偑弌傞偙偲偵姷傟偒偭偰偄傞偲丄帺暘偑抲偐傟偨忬嫷傪峫偊偢偵丄
堦搙偵懡悢偺僼傽僀儖傪嶍彍巜掕偟偰偟傑傢側偄偲傕尷傝傑偣傫丅摨條偵丄rm
僐儅儞僪傪奺庬僗僋儕僾僩傗僾儘僌儔儉偱抲偒姺偊傞偺傕丄挊幰偺峫偊偱偼丄
婋尟側偙偲偩偲巚偄傑偡丅

傕偆彮偟傑偟側曽朄偲偟偰偼丄rm 偲偼暿偺僐儅儞僪柤偱丄乽僑儈敔乿宍幃偺嶍
彍偑偱偒傞傛偆側僷僢働乕僕傪巊偭偰傒傞偙偲偱偡丅徻偟偔偼丄Peek, et al
(1993) (Section 15 嶲徠) 傪尒偰偔偩偝偄丅偨偩丄偙傟偵傕栤戣偼偁傝傑偡丅
偙偺僷僢働乕僕偺嶌幰偼丄嶍彍偵偮偄偰儐乕僓偑柍撢拝偵側傞傛偆彠椼偟偰偄
傞傛偆偵巚傢傟傞偐傜偱偡丅Unix 僔僗僥儉忋偱偼丄傓偟傠丄帺屓愑擟偵婎偯偔
怲廳側塣梡偲偄偆傾僾儘乕僠偑婎杮偵側傞偼偢偱偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

3. 偳偺掱搙偺暅媽棪偑尒崬傔傞偺偐丠

応崌偵傛傝傑偡丅Linux 偺傛偆側崅婡擻丄儅儖僠儐乕僓丄儅儖僠僞僗僋偺僆儁
儗乕僥傿儞僌僔僗僥儉偱僼傽僀儖傪暅媽偡傞応崌偺栤戣揰偺傂偲偮偼丄扤偑偄
偮僨傿僗僋偵彂偒崬傒傪偡傞偐暘偐傜側偄偲偄偆偙偲偱偡丅僼傽僀儖傪嶍彍偡
傞傛偆柦椷偝傟傞偲丄僆儁儗乕僥傿儞僌僔僗僥儉偼偦偺僼傽僀儖偑愯傔偰偄偨
僨傿僗僋僽儘僢僋傪丄怴婯僼傽僀儖偵妱傝摉偰傞偨傔偺嬻娫偲偟偰擣幆偟傑偡
丅(偙傟偼丄Unix 宯僆儁儗乕僥傿儞僌僔僗僥儉偵尒傜傟傞堦斒尨懃偺揟宆揑側
椺偱偡丅偮傑傝丄僇乕僱儖傗偦偺娭楢僣乕儖偼丄儐乕僓偑巇慻傒傪棟夝偟偨忋
偱嶌嬈偟偰偄傞偙偲傪慜採偵偟偰偄傞偲偄偆偙偲偱偡丅) 堦斒偵丄儅僔儞傪崜
巊偟偰偄傞傎偳丄僼傽僀儖偺暅媽偼擄偟偔側傝傑偡丅

傑偨丄僨傿僗僋偺僼儔僌儊儞僥乕僔儑儞傕僼傽僀儖偺暅媽棪偵塭嬁偟傑偡丅嶍
彍僼傽僀儖偑僼儔僌儊儞僥乕僔儑儞偺寖偟偄僷乕僥傿僔儑儞偵偁偭偨応崌偵偼
丄偦偺僼傽僀儖慡懱傪暅媽偱偒傞妋棪偼掅壓偟傑偡丅

傕偟撉幰偺儅僔儞偑 (挊幰偺儅僔儞偺傛偆偵) 帠幚忋僔儞僌儖儐乕僓偺儚乕僋
僗僥乕僔儑儞偱偁傝丄僼傽僀儖傪嶍彍偟偰偟傑偭偨弖娫偵僨傿僗僋傪崜巊偡傞
傛偆側張棟偑峴傢傟偰偄側偐偭偨偲偡傞側傜丄朻摢偱徯夘偟偨挊幰偺応崌偲摨
摍偺暅媽棪傪払惉偱偒傞偲巚傢傟傑偡丅挊幰偼僼傽僀儖偺 94 % 嬤偔傪柍彎偱
暅媽偟傑偟偨 (偟偐傕偙傟傜偼僶僀僫儕偱偡)丅偍偦傜偔 80 % 埲忋暅媽偱偒傟
偽丄偐側傝枮懌偱偒傞偼偢偩偲巚偄傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

4. 偱偼丄偳偆傗偭偰暅媽偡傞偺偐丠

暅媽嶌嬈偺庡梫側晹暘偼丄raw 僷乕僥傿僔儑儞僨僶僀僗偐傜僨乕僞傪尒偮偗偩
偟偰丄 +偦傟傪僆儁儗乕僥傿儞僌僔僗僥儉偑擣幆偱偒傞傛偆偵偡傞偙偲偱偡丅
+偙傟偵偼婎杮揑偵擇庬椶偺曽朄偑偁傝傑偡丅傂偲偮偼丄尰嵼偺僼傽僀儖僔僗僥
儉忋偵偁傞嶍彍偝傟偨僼傽僀儖偺 i 僲乕僪傪偄偠偭偰 'deleted' 僼儔僌傪庢
傝彍偒丄僨乕僞偑杺朄偺傛偆偵傕偲偺応強偵栠偭偰偔傞傛偆偵婩傞丄偲偄偆傕
偺偱偡丅傕偆傂偲偮偺丄傛傝埨慡偱偼偁傝傑偡偑帪娫偺偐偐傞曽朄偼丄僷乕僥
傿僔儑儞撪偵偁傞僨乕僞傪扵偟弌偟偰丄暿偺僼傽僀儖僔僗僥儉忋偺怴婯僼傽僀
儖偵偦偺僨乕僞傪彂偒弌偡偲偄偆傕偺偱偡丅

偨偩偟丄僨乕僞暅媽偵庢傝偐偐傞慜偵丄傗偭偰偍偔傋偒嶌嬈偑壗抜奒偐偁傝傑
偡丅徻嵶偼丄Section 5, Section 6 偍傛傃 Section 7 傪偛棗偔偩偝偄丅幚嵺
偵僼傽僀儖傪暅媽偡傞曽朄偼丄 Section 8, Section 9, Section 10, Section
11 傪嶲徠偟偰偔偩偝偄丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

5. 僼傽僀儖僔僗僥儉偺儅僂儞僩夝彍

偳偪傜偺曽朄傪巊偆偵偣傛丄傑偢嵟弶偵嶍彍偟偨僼傽僀儖偑擖偭偰偄傞僼傽僀
儖僔僗僥儉偺儅僂儞僩傪夝彍偡傞昁梫偑偁傝傑偡丅偙偙偱峇偰傞偲丄僼傽僀儖
僔僗僥儉傪傔偪傖傔偪傖偵偟偰偟傑偆壜擻惈偑偁傞偺偱拲堄偟偰偔偩偝偄丅偙
偺嶌嬈偼丄僼傽僀儖傪嶍彍偟偰偟傑偭偨偙偲偵婥偑晅偄偨帪揰偱弌棃傞尷傝偡
偽傗偔峴傢側偗傟偽側傝傑偣傫丅儅僂儞僩夝彍偑憗偗傟偽憗偄傎偳丄僨乕僞偑
忋彂偒偝傟傞壜擻惈傕彮側偔側傝傑偡丅

嵟傕娙扨側曽朄偼丄師偺傛偆側傕偺偱偡丅偙偙偱偼丄嶍彍偟偨僼傽僀儖偑 /usr
偵偁傞傕偺偲壖掕偟偰偄傑偡丅

 
劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # umount /usr                                                     劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊
 

偟偐偟丄/usr 埲壓偵抲偐傟偰偄傞傕偺偑巊偊側偔側傞偺偼崲傞偐傕偟傟傑偣傫
丅偦偺応崌丄read-only 偱嵞儅僂儞僩偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # mount -o ro,remount /usr                                        劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

嶍彍偟偨僼傽僀儖偑儖乕僩僷乕僥傿僔儑儞忋偵偁傞応崌偼丄-n 僆僾僔儑儞傪晅
偗偰丄/etc/mtab 僼傽僀儖傊偺彂偒崬傒傪旔偗傞昁梫偑偁傝傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # mount -n -o ro,remount /                                        劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偳偺曽朄偱儅僂儞僩夝彍偡傞偐偵娭傢傝側偔丄懠偺僾儘僙僗偑摉奩偺僼傽僀儖
僔僗僥儉傪巊偭偰偄傞壜擻惈傕偁傝傑偡 (偦偺応崌丄儅僂儞僩夝彍偼幐攕偟丄
"Resource busy" 偺僄儔乕偑昞帵偝傟傑偡)丅偙偆偄偆帪偺偨傔偵丄摿掕偺僼傽
僀儖傗儅僂儞僩億僀儞僩傪巊偭偰偄傞僾儘僙僗偵懳偟偰僔僌僫儖傪憲傞僾儘僌
儔儉偑懚嵼偟傑偡丅fuser 偱偡丅偙傟傪 /usr 僷乕僥傿僔儑儞偵懳偟偰巊偭偰
傒傑偟傚偆丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fuser -v -m /usr                                                劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

忋婰僐儅儞僪偵傛偭偰丄懳徾偲側傞僾儘僙僗偑楍婰偝傟傑偡丅廳梫側僾儘僙僗
偑懚嵼偟側偄偙偲偑妋擣偱偒偨傜丄師偺僐儅儞僪傪幚峴偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fuser -k -v -m /usr                                             劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙偆偡傞偲屄乆偺僾儘僙僗偵 SIGKILL 僔僌僫儖傪憲傝傑偡 (偙傟偼僾儘僙僗傪
妋幚偵嶦偡僔僌僫儖偱偡)丅偁傞偄偼丄師偺傛偆偵偟偰傕寢峔偱偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fuser -k -TERM -v -m /usr                                       劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙傟偼屄乆偺僾儘僙僗偵 SIGTERM 僔僌僫儖傪憲傝傑偡 (偙傟偼僾儘僙僗傪惓忢
偵廔椆偝偣傞僔僌僫儖偱偡)丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

6. i-node 傪捈愙彂偒姺偊傞応崌偺弨旛

挊幰偲偟偰偼丄偙偺曽朄偼偍偡偡傔偟傑偣傫丅偙傟偼僼傽僀儖僔僗僥儉偺掅儗
儀儖憌傪偄偠傞傢偗偱偡偑丄偦偆偄偆傗傝曽偑尗柧偩偲偼巚偊側偄偐傜偱偡丅
傑偨偙偺曽朄偱偼丄妋幚偵暅媽偱偒傞偺偼屄乆偺僼傽僀儖偺嵟弶偺 12 僽儘僢
僋偩偗側偺偱偡丅偟偨偑偭偰丄戝偒側僼傽僀儖傪暅媽偡傞嵺偼丄捠忢丄嵟廔揑
偵懠偺曽朄傪巊傢偞傞傪摼傑偣傫丅(偲偼偄偊丄徻偟偄忣曬偼丄 Section 12 傪
偛棗偔偩偝偄丅)

偳偆偟偰傕偙偺曽朄傪巊傢側偄偲婥偑嵪傑側偄応崌偼丄 raw 僷乕僥傿僔儑儞偺
僨乕僞傪懠偺僷乕僥傿僔儑儞忋偵僨傿僗僋僀儊乕僕偲偟偰僐僺乕偟丄偦偺僀儊
乕僕傪 loopback 傪巊偭偰儅僂儞僩偡傞偙偲傪偍偡偡傔偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # cp /dev/hda5 /root/working                                      劆
劆  # mount -t ext2 -o loop /root/working /mnt                        劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

(拲堄偟偰傎偟偄偺偼丄mount 僐儅儞僪偺僶乕僕儑儞偑屆偄偲丄忋婰偺僐儅儞僪
偱栤戣偑惗偠傞偐傕偟傟側偄偲偄偆偙偲偱偡丅 mount 偑忋庤偔摦偐側偄応崌丄
嵟怴僶乕僕儑儞偐丄彮側偔偲傕 version 2.7 埲忋偵峏怴偡傞偙偲傪嫮偔偍偡偡
傔偟傑偡丅屆偄僶乕僕儑儞偵偼丄抳柦揑側僙僉儏儕僥傿忋偺僶僌偑偁傞偐傜偱
偡丅)

偙偺傛偆偵 loopback 傪巊偭偰偍偔偲丄偦偺僼傽僀儖僔僗僥儉傪姰慡偵攋夡偟
偰偟傑偭偨応崌偱傕丄 raw 僷乕僥傿僔儑儞傪嵞搙僐僺乕偟偰傗傝捈偡偩偗偱嵪
傒傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

7. 暿偺応強偵僨乕僞傪彂偒弌偡応崌偺弨旛

暿偺応強偵僨乕僞傪彂偒弌偡曽朄傪庢傞応崌偼丄傑偢儗僗僉儏乕僷乕僥傿僔儑
儞偑偁傞偐偳偆偐傪妋擣偡傞昁梫偑偁傝傑偡丅偮傑傝丄暅媽偟偨偄僼傽僀儖偺
僐僺乕傪彂偒弌偡応強傪妋曐偡傞傢偗偱偡丅偍偦傜偔丄撉幰偺僔僗僥儉偵偼暋
悢偺僷乕僥傿僔儑儞偑偁傝丄儖乕僩傗 /usr丄/home 偼暿乆偺僷乕僥傿僔儑儞偵
暘偐傟偰偄傞偲巚偄傑偡丅偙偺偆偪偺傂偲偮傪巊偭偰傕丄慡偔栤戣側偄偼偢偱
偡丅偳傟偐傂偲偮偺僷乕僥傿僔儑儞忋偵丄怴婯偺僨傿儗僋僩儕傪嶌惉偟傑偟傚
偆丅

儖乕僩僷乕僥傿僔儑儞偟偐側偔偰丄偡傋偰傪偦偙偵曐懚偟偰偄傞応崌偼丄庒姳
柺搢偱偡丅偦傟偱傕 MS-DOS 傗 Windows 偺僷乕僥傿僔儑儞偑巊偊偨傝丄傕偟偔
偼僇乕僱儖儌僕儏乕儖偲偟偰 ramdisk 僪儔僀僶傪巊偊傞傛偆偵偼側偭偰偄傞偺
偱偼側偄偱偟傚偆偐丠 ramdisk 傪巊偆偵偼 (偙傟偼丄1.3.48 埲崀偺僇乕僱儖
偱偁傞偙偲偑慜採偱偡) 師偺傛偆偵偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # dd if=/dev/zero of=/dev/ram0 bs=1k count=2048                   劆
劆  # mke2fs -v -m 0 /dev/ram0 2048                                   劆
劆  # mount -t ext2 /dev/ram0 /mnt                                    劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙傟偵傛偭偰 2 MB 偺 ramdisk 椞堟偑嶌惉偝傟丄/mnt 忋偵儅僂儞僩偝傟傑偡
丅

彮乆拲堄: 撉幰偑 kerneld (傕偟偔偼丄 2.2.x 傗 2.1.x 埲崀偺僇乕僱儖傪巊
偭偰偄傞側傜偦偺屻宲偱偁傞 kmod) 傪巊偭偰僇乕僱儖儌僕儏乕儖傪儘乕僪偟偰
偄傞応崌丄ramdisk 椞堟偐傜晄婗敪惈僗僩儗乕僕傊偺僐僺乕偑廔椆偡傞傑偱
ramdisk 偺儅僂儞僩傪夝彍偟偰偼偄偗傑偣傫丅ramdisk 椞堟偺儅僂儞僩傪夝彍
偡傞偲丄kerneld 偼儌僕儏乕儖傪 (堦掕帪娫宱夁屻偵) 傾儞儘乕僪偱偒傞傕偺
偲巚偭偰偟傑偄丄偝傜偵幚嵺偵傾儞儘乕僪偝傟偰偟傑偆偲丄ramdisk 偺儊儌儕
椞堟偼僇乕僱儖偺懠偺晹暘偵嵞棙梡偝傟偰偟傑偭偰丄嬯楯偟偰僨乕僞偺暅媽偵
旓傗偟偨帪娫偑慡偔柍懯偵側偭偰偟傑偆偐傜偱偡丅

Zip 傗 Jaz, LS-120 偲偄偭偨儕儉乕僶僽儖憰抲傪帩偭偰偄傞側傜丄儗僗僉儏乕
僷乕僥傿僔儑儞偺抲偒応強偲偟偰惀旕棙梡偟偰偔偩偝偄丅帩偭偰偄側偄応崌偼
丄僼儘僢僺乕偱偄偒傑偟傚偆丅

懠偵昁梫偵側傞偺偼丄僷乕僥傿僔儑儞僨僶僀僗忋偐傜昁梫側僨乕僞傪撉傒弌偣
傞僾儘僌儔儉偱偡丅偄偞偲側傟偽 dd 偱傕弌棃傞偺偱偡偑丄偱傕椺偊偽丄僷乕
僥傿僔儑儞偺 600 MB 栚偐傜 800MB 栚傑偱偺椞堟傪撉傒弌偦偆偲偡傞傛偆側応
崌丄dd 偼嵟弶偺 600 MB 偺椞堟傪柍帇偱偒偢丄偳偆偟偰傕摢偐傜撉傒崬傕偆偲
偟偰偟傑偆偺偱偡丅崅懍側僨傿僗僋傪巊偭偰偄傞応崌偱傕丄偙傟偵偼偐側傝偺
帪娫偑妡偐傝傑偡丅偙偺怳傞晳偄傪側傫偲偐偟傛偆偲偟偰丄挊幰偼丄僷乕僥傿
僔儑儞偺搑拞偵偁傞椞堟傪揔愗偵撉傒弌偟偱偒傞僾儘僌儔儉傪嶌惉偟傑偟偨丅
fsgrab 偲偄偆柤慜偺僾儘僌儔儉偱偡丅偙偺僾儘僌儔儉偺僜乕僗僷僢働乕僕偼丄
挊幰偺僂僃僽僒僀僩 <http://pobox.com/~aaronc/tech/fsgrab-1.2.tar.gz> 傗
Metalab <http://metalab.unc.edu/pub/Linux/utils/file/> (偲偦偺儈儔乕僒
僀僩) 偵偁傝傑偡丅撉幰偑偙偺曽朄傪巊偭偰偔傟傞傕偺偲壖掕偟偰丄偙偙偐傜
愭偼丄撉幰偑 fsgrab 傪帩偭偰偄傞傕偺偲偟偰愢柧偟傑偡丅

偨偩丄暅媽偟傛偆偲偟偰偄傞僼傽僀儖偺戝偒偝偑偳傟傕 12 僨傿僗僋僽儘僢僋
傪挻偊側偄応崌 (1 僨傿僗僋僽儘僢僋偼捠忢 1 Kb 偱偡)丄fsgrab 偼晄梫偱偡
丅

fsgrab 偑昁梫偩偑僟僂儞儘乕僪偲價儖僪偑僀儎側応崌偼丄 fsgrab 偺僐儅儞僪
儔僀儞傪 dd 偺僐儅儞僪儔僀儞偵抲偒姺偊偰峫偊偰偔偩偝偄丅椺偊偽丄fsgrab
偺僐儅儞僪儔僀儞偑埲壓偺傛偆側応崌丄

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  fsgrab -c count -s skip device                                    劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙傟偵憡摉偡傞 dd 偺僐儅儞僪儔僀儞偼 (偍偦傜偔張棟帪娫偑梋暘偵妡偐傝傑
偡偑) 師偵傛偆偵側傝傑偡丅

 
劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  dd bs=1k if=device count=count skip=skip                          劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊
 

偙偙偱堦墳寈崘偟偰偍偒傑偡丅fsgrab 僾儘僌儔儉偼丄挊幰偺傕偲偱偼姰帏偵婡
擻偟傑偟偨偑丄撉幰偺傕偲偱偳偺傛偆側怳傞晳偄傪偟傛偆偲傕挊幰偼堦愗愑擟
傪晧偊傑偣傫丅幚嵺偙傟偼丄偒偪偭偲愝寁偝傟偨僾儘僌儔儉偱偼側偔丄側傫偲
偐張棟傪偙側偡偩偗傕偺偵偡偓傑偣傫丅柶愑偵娭偡傞徻嵶偼丄僾儘僌儔儉晅懏
偺 COPYRIGHT 僼傽僀儖偵婰嵹偝傟偨 "No Warranty" 偺復傪偛棗偔偩偝偄 (the
GNU General Public License 偱偡)丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

8. 嶍彍偟偨 i-node 傪尒偮偗偩偡

師偵摜傓傋偒庤弴偼丄僼傽僀儖僔僗僥儉傪憱嵏偟偰丄偳偺 i-node 偑嵟嬤夝曻
偝傟偨偺偐傪挷傋傞偙偲偱偡丅偙偺嶌嬈傪幚峴偡傞偵偼 debugfs 傪巊偄傑偡丅
debugfs 偵僼傽僀儖僔僗僥儉偑曐懚偝傟偰偄傞僨僶僀僗偺僨僶僀僗僼傽僀儖柤
傪晅偗偰婲摦偟偰偔偩偝偄丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # debugfs /dev/hda5                                               劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

i-node 傪捈愙曄峏偟偨偄応崌偼丄-w 僆僾僔儑儞傪晅偗偰僼傽僀儖僔僗僥儉傊
偺彂偒崬傒偑偱偒傞傛偆偵偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # debugfs -w /dev/hda5                                            劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

嶍彍偟偨 i-node 傪扵偡偨傔偺 debugfs 偺僐儅儞僪偼 lsdel 偱偡丅僾儘儞僾
僩偐傜師偺傛偆偵懪偪崬傫偱偔偩偝偄丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  lsdel                                                   劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

僨傿僗僋憰抲傊偺傾僋僙僗壒偑偟偽傜偔懕偄偨屻偱丄挿偄 i-node 偺儕僗僩偑
僷僀僾張棟偝傟丄($PAGER 偱愝掕偟偨) 儁乕僕儍偵昞帵偝傟傑偡丅偙偺儕僗僩
傪暿偺応強偵曐懚偟偨偄応崌丄less 傪巊偭偰偄傞側傜丄-o 僆僾僔儑儞偺屻偵
弌椡僼傽僀儖柤傪巜掕偟傑偡丅 less 埲奜傪巊偭偰偄傞側傜丄弌椡傪暿偺応強
偵憲傞昁梫偑偁傝傑偡丅師偺傛偆偵偟偰偔偩偝偄丅

 
劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  quit                                                    劆
劆  # echo lsdel | debugfs /dev/hda5 > lsdel.out                      劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊
 

偙偙偱丄嶍彍擔帪丄僼傽僀儖僒僀僘丄僼傽僀儖僞僀僾丄僷乕儈僢僔儑儞偺悢抣
丄僼傽僀儖強桳幰側偳偺忣曬偩偗偵婎偯偄偰丄暅媽偟偨偄僼傽僀儖偑偳傟側偺
偐傪尒偮偗偩偝側偗傟偽側傝傑偣傫丅塣椙偔丄屲暘傎偳慜偵嶍彍偟偨戝偒側僼
傽僀儖摍偱偁傟偽丄斾妑揑娙扨偵尒偮偗偩偡偙偲偑偱偒傞偱偟傚偆丅傕偟偦偆
偱側偗傟偽丄儕僗僩傪偟傜傒偮傇偟偵偁偨偭偰偄偒傑偟傚偆丅

壜擻側傜丄i-node 偺儕僗僩傪僾儕儞僩傾僂僩偡傞偙偲傪偍偡偡傔偟傑偡丅挷傋
傞偺偑偢偭偲妝偵側傝傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

9. i-node 偺徻嵶傪挷傋傞

debugfs 偵偼 stat 僐儅儞僪偑偁傝丄偙傟傪巊偆偲 i-node 偺徻嵶傪昞帵偡傞
偙偲偑偱偒傑偡丅暅媽儕僗僩偵偁傞偦傟偧傟偺 i-node 偵懳偟偰 stat 僐儅儞
僪傪幚峴偟偰偔偩偝偄丅椺偊偽丄i-node 斣崋 148003 傪挷傋傛偆偲偡傞応崌偼
丄師偺傛偆偵偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  stat <148003>                                                 劆
劆  Inode: 148003   Type: regular    Mode:  0644   Flags: 0x0   Version: 1  劆
劆  User:   503   Group:   100   Size: 6065                                 劆
劆  File ACL: 0    Directory ACL: 0                                         劆
劆  Links: 0   Blockcount: 12                                               劆
劆  Fragment:  Address: 0    Number: 0    Size: 0                           劆
劆  ctime: 0x31a9a574 -- Mon May 27 13:52:04 1996                           劆
劆  atime: 0x31a21dd1 -- Tue May 21 20:47:29 1996                           劆
劆  mtime: 0x313bf4d7 -- Tue Mar  5 08:01:27 1996                           劆
劆  dtime: 0x31a9a574 -- Mon May 27 13:52:04 1996                           劆
劆  BLOCKS:                                                                 劆
劆  594810 594811 594814 594815 594816 594817                               劆
劆  TOTAL: 6                                                                劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

暅媽偟偨偄僼傽僀儖偑偨偔偝傫偁傞側傜丄忋婰偺庤懕偒傪帺摦壔偟偨偄偲偍巚
偄偱偟傚偆丅lsdel 偱嶌惉偟偨暅媽儕僗僩偑 lsdel.out 僼傽僀儖偵擖偭偰偄傞
偲偡傞側傜丄傑偢師偺傛偆偵偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # cut -c1-6 lsdel.out | grep "[0-9]" | tr -d " " > inodes         劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙傟偵傛偭偰嶌惉偝傟偨 inodes 僼傽僀儖偵偼丄暅媽偡傋偒 i-node 偺 i-node
斣崋偩偗偑堦峴偵傂偲偮偢偮婰弎偝傟偰偄傑偡丅偙偺忣曬傪僼傽僀儖偵曐懚偟
偨偺偼丄偦偺曽偑屻乆曋棙偩偐傜偱偡丅偦偟偰師偵丄埲壓偺傛偆偵偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # sed 's/^.*$/stat <\0>/' inodes | debugfs /dev/hda5 > stats      劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

埲忋偱 stats 僼傽僀儖偵丄stat 僐儅儞僪偺弌椡寢壥偑慡偰婰榐偝傟傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

10. 僨乕僞僽儘僢僋偺暅媽

偙偙偱偺庤弴偼丄暅媽偟傛偆偲偡傞僼傽僀儖偺戝偒偝偑 12 僨傿僗僋僽儘僢僋
埲壓偱偁傞偐斲偐偵傛偭偰丄旕忢偵娙扨偵傕側傝丄媡偵柺搢偵傕側傝摼傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

10.1. 彫偝側僼傽僀儖

僼傽僀儖偺僒僀僘偑 12 僽儘僢僋埲壓側傜丄僼傽僀儖偺僨乕僞傪曐帩偟偰偄傞
僽儘僢僋僫儞僶乕偺偡傋偰偑丄専弌偟偨 i-node 偺拞偵彂偒崬傑傟偰偄傑偡丅
偦偺 i-node 偵懳偟偰 stat 傪幚峴偡傞偲丄僽儘僢僋僫儞僶乕傪捈愙撉傒弌偡
偙偲偑偱偒傑偡丅偝傜偵 debugfs 偵偼丄偙偺張棟傪帺摦壔偡傞僐儅儞僪傕慻傒
崬傑傟偰偄傑偡丅慜復偱庢傝忋偘偨椺傪偙偙偱傕巊偭偰愢柧偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  stat <148003>                                                 劆
劆  Inode: 148003   Type: regular    Mode:  0644   Flags: 0x0   Version: 1  劆
劆  User:   503   Group:   100   Size: 6065                                 劆
劆  File ACL: 0    Directory ACL: 0                                         劆
劆  Links: 0   Blockcount: 12                                               劆
劆  Fragment:  Address: 0    Number: 0    Size: 0                           劆
劆  ctime: 0x31a9a574 -- Mon May 27 13:52:04 1996                           劆
劆  atime: 0x31a21dd1 -- Tue May 21 20:47:29 1996                           劆
劆  mtime: 0x313bf4d7 -- Tue Mar  5 08:01:27 1996                           劆
劆  dtime: 0x31a9a574 -- Mon May 27 13:52:04 1996                           劆
劆  BLOCKS:                                                                 劆
劆  594810 594811 594814 594815 594816 594817                               劆
劆  TOTAL: 6                                                                劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

忋婰僼傽僀儖偼 6 偮偺僽儘僢僋偐傜惉傝棫偭偰偄傑偡丅12 僽儘僢僋偲偄偆尷
搙埲壓側偺偱丄debugfs 僐儅儞僪傪巊偭偰偙偺僼傽僀儖傪暿偺応強丄偙偙偱偼
/mnt/recovered.000 偵彂偒弌偡偙偲偑偱偒傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  dump <148003> /mnt/recovered.000                        劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

傕偪傠傫 fsgrab 僐儅儞僪偱傕摨條偺張棟偑壜擻偱偡丅 fsgrab 偺応崌偼丄師
偺傛偆偵偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fsgrab -c 2 -s 594810 /dev/hda5 > /mnt/recovered.000            劆
劆  # fsgrab -c 4 -s 594814 /dev/hda5 >> /mnt/recovered.000           劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

debugfs 偱傕 fsgrab 偱傕丄 /mnt/recovered.000 偺枛旜偵晄梫側忣曬偑晅壛
偝傟偰偟傑偄傑偡偑丄慡偔栤戣偼偁傝傑偣傫丅偙偺梋暘側忣曬傪庢傝彍偔偵偼
丄 i-node 偺 Size 僼傿乕儖僪偵偁傞抣傪庢傝弌偟丄偙偺抣傪 dd 僐儅儞僪偺
bs 僆僾僔儑儞偵巜掕偡傞偺偑嵟傕娙扨偱偟傚偆丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # dd count=1 if=/mnt/recovered.000 of=/mnt/resized.000 bs=6065    劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

傕偪傠傫丄僼傽僀儖傪峔惉偟偰偄偨僨傿僗僋僽儘僢僋偺偄偔偮偐偼丄婛偵忋彂
偒偝傟偰偟傑偭偰偄傞偐傕偟傟傑偣傫丅偦偺応崌偼塣偑埆偐偭偨偲偟偐尵偊傑
偣傫丅偦偺僽儘僢僋傪暅媽偡傞偙偲偼晄壜擻偱偡丅(僷乕僥傿僔儑儞傪偡偽傗偔
umount 偱偒偨偐斲偐偑彑晧偺暘偐傟栚偱偡丅)

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

10.2. 戝偒側僼傽僀儖

僼傽僀儖偺僨乕僞偑 12 僽儘僢僋埲忋偁傞応崌偼丄偪傚偭偲柺搢偱偡丅偝偟偁
偨傝丄愭偢 UNIX 偺僼傽僀儖僔僗僥儉偑偳偆偄偆峔憿偵側偭偰偄傞偺偐傪庒姳
棟夝偟偰偍偔昁梫偑偁傝傑偡丅僼傽僀儖偺僨乕僞偼丄乽僽儘僢僋乿偲屇偽傟傞
扨埵偵暘妱偝傟偰僨傿僗僋忋偵曐懚偝傟偰偄傑偡丅偙偺僽儘僢僋偵偼丄摢偐傜
弴偵斣崋偑晅偗傜傟偰偄傑偡丅傑偨丄僼傽僀儖偼乽i-node乿偲偄偆忣曬傕帩偪
丄i-node 偵偼僼傽僀儖強桳幰傗僷乕儈僢僔儑儞丄僼傽僀儖僞僀僾摍偺忣曬偑婰
嵹偝傟偰偄傑偡丅僽儘僢僋偲摨偠偔 i-node 偵傕弴偵斣崋偑怳傜傟偰偄傑偡偑
丄偙偺擇偮偺僔乕働儞僗偼慡偔暿偺傕偺偱偡丅僨傿儗僋僩儕僄儞僩儕偼丄僼傽
僀儖柤偲 i-node 斣崋偲偐傜側傝傑偡丅

偟偐偟偙傟偩偗偱偼丄僇乕僱儖偼僨傿儗僋僩儕僄儞僩儕偵懳墳偡傞僨乕僞傪尒
偮偗傞偙偲偑弌棃傑偣傫丅偦傟備偊 i-node 偵偼丄師偺傛偆偵丄僼傽僀儖僨乕
僞偺僽儘僢僋偺埵抲偵娭偡傞忣曬傕婰嵹偝傟傞傛偆偵側偭偰偄傑偡丅

 

 丒 12 僨乕僞僽儘僢僋暘偺僽儘僢僋斣崋偼丄i-node 偵捈愙婰嵹偝傟偰偄傑偡
    丅偙傟傜偺僨傿僗僋僽儘僢僋偼丄捈愙僽儘僢僋(direct block) 偲屇偽傟傞
    偙偲傕偁傝傑偡丅
   
 丒 i-node 偵偼丄娫愙僽儘僢僋(indirect block) 偺僽儘僢僋斣崋偑傂偲偮婰
    嵹偝傟傑偡丅偙偺娫愙僽儘僢僋偵偼丄捈愙僽儘僢僋傪挻夁偟偨 256 僽儘僢
    僋暘偺僽儘僢僋斣崋偑婰嵹偝傟偰偄傑偡丅
   
 丒 i-node 偵偼丄擇廳娫愙僽儘僢僋(doubly indirect block) 偺僽儘僢僋斣崋
    偑傂偲偮婰嵹偝傟傑偡丅擇廳娫愙僽儘僢僋偵偼丄忋婰偺娫愙僽儘僢僋傪挻
    夁偟偨 256 屄暘偺娫愙僽儘僢僋偑婰嵹偝傟偰偄傑偡丅
   
 丒 i-node 偵偼丄嶰廳娫愙僽儘僢僋(triply indirect block) 偺僽儘僢僋斣崋
    偑傂偲偮婰嵹偝傟傑偡丅嶰廳娫愙僽儘僢僋偵偼丄忋婰偺擇廳娫愙僽儘僢僋
    傪挻夁偟偨 256 屄暘偺擇廳娫愙僽儘僢僋偺僽儘僢僋斣崋偑婰嵹偝傟偰偄傑
    偡丅
   
 

埲忋傪傕偆堦搙撉傫偱偔偩偝偄丅妋偐偵傗傗偙偟偄偱偡偑丄旕忢偵廳梫偱偡丅

尰嵼丄僶乕僕儑儞 2.0.36 埲崀偺偡傋偰偺僇乕僱儖偱偼丄僼傽僀儖傪嶍彍偡傞
嵺偵娫愙僽儘僢僋 (偍傛傃擇廳娫愙僽儘僢僋埲忋) 傪偡傋偰僛儘偟偰偟傑偆傛
偆偵側偭偰偄傑偡丅偦傟備偊丄12 僽儘僢僋埲忋偺僼傽僀儖偺応崌丄僼傽僀儖撪
梕偺暅媽偳偙傠偐丄昁梫側僽儘僢僋斣崋傪尒偮偗弌偣傞曐徹偡傜偁傝傑偣傫丅

偄傑偺偲偙傠挊幰偑偨偳傝拝偄偨桞堦偺曽朄偼丄偦偺僼傽僀儖偺僨乕僞偑僼儔
僌儊儞僩壔偣偢偵楢懕偟偰暲傫偱偄傞偲壖掕偟偰丄嶌嬈傪峴偭偰傒傞偲偄偆偙
偲偱偡丅僼儔僌儊儞僩壔偟偰偟傑偭偰偄傞応崌偼旕忢偵傗偭偐偄偱偡丅僼儔僌
儊儞僩壔偟偰偄側偄偲壖掕偡傞側傜丄僨乕僞僽儘僢僋偺暲傃曽偵偼 (僼傽僀儖
偺僨乕僞僽儘僢僋悢偵懳墳偟偰) 師偺傛偆側僷僞乕儞偑峫偊傜傟傑偡丅

0 偐傜 12 僽儘僢僋
   
    忋弎偟偨傛偆偵丄僽儘僢僋斣崋偼丄i-node 偵婰嵹偝傟偰偄傑偡丅
   
13 偐傜 268 僽儘僢僋
   
    捈愙僽儘僢僋偺偁偲偵娫愙僽儘僢僋偑傂偲偮偁傝丄偦偺屻偵 256 屄偺僨乕
    僞僽儘僢僋偑暲傃傑偡丅
   
269 偐傜 65804 僽儘僢僋
   
    忋婰摨條丄12 屄偺捈愙僽儘僢僋丄傂偲偮偺 (晄梫側) 娫愙僽儘僢僋丄偦偟
    偰 256 屄偺僽儘僢僋偑暲傃傑偡丅偦偺屻偵丄傂偲偮偺 (晄梫側) 擇廳娫愙
    僽儘僢僋偑偁傝丄偝傜偵傂偲偮偺 (晄梫側) 娫愙僽儘僢僋偲 256 屄偺僨乕
    僞僽儘僢僋偲偄偆慻傒崌傢偣偑 256 慻懕偒傑偡丅
   
65805 僽儘僢僋埲忋
   
    朻摢偺 65804 僽儘僢僋傑偱偺暲傃偼忋婰偲摨條偱偡丅偦偺屻偵丄傂偲偮偺
    (晄梫側) 嶰廳娫愙僽儘僢僋偑偁傝丄偝傜偵 256 慻偺乽擇廳娫愙僔乕働儞
    僗乿偑懕偒傑偡丅擇廳娫愙僔乕働儞僗偼丄(晄梫側) 擇廳娫愙僽儘僢僋傪愭
    摢偲偟丄偦偺屻偵傂偲偮偺 (晄梫側) 娫愙僽儘僢僋偲 256 屄偺僨乕僞僽儘
    僢僋偲偄偆慻傒崌傢偣偑 256 慻懕偔暲傃偵傛偭偰峔惉偝傟傑偡丅
   
傕偪傠傫丄偙偙偱壖掕偟偨僨乕僞僽儘僢僋偺僽儘僢僋斣崋偑惓偟偄偲偟偰傕丄
偦偺拞恎偱偁傞僨乕僞偦偺傕偺偑彂偒姺偊傜傟偰偄側偄偲偄偆曐徹偼偁傝傑偣
傫丅偝傜偵丄僼傽僀儖偑戝偒偔側傟偽側傞傎偳丄偦偺僼傽僀儖偑(摿庩側娐嫬傪
擿偄偰) 側傫傜偐偺僼儔僌儊儞僥乕僔儑儞傪婲偙偝偢偵丄僼傽僀儖僔僗僥儉偵
彂偒崬傑傟偰偄傞壜擻惈偼彫偝偔側傝傑偡丅

拲堄偟偰傎偟偄偺偼丄偙偺暥彂偱偼偙傟傑偱僽儘僢僋僒僀僘偑昗弨揑側 1024
僶僀僩偱偁傞偲壖掕偟偨忋偱愢柧偟偰偄傞偲偄偆偙偲偱偡丅僽儘僢僋僒僀僘傪
偦傟埲忋偵愝掕偟偰偄傞応崌丄忋弎偺悢帤偼曄壔偟傑偡丅摿偵丄屄乆偺僽儘僢
僋斣崋偼 4 僶僀僩挿側偺偱丄"僽儘僢僋僒僀僘/4" 偼丄屄乆偺娫愙僽儘僢僋偵
偁傞僽儘僢僋斣崋偺悢偲堦抳偟傑偡丅偦傟備偊丄忋婰偺愢柧偱 256 偲偄偆悢帤
偑尰傟偨偲偒偼丄昁偢 "僽儘僢僋僒僀僘/4" 偵抲偒姺偊偰偔偩偝偄丅乽昁梫側
僽儘僢僋偺悢乿偺嫬奅傕曄傢傞偙偲偵側傞偼偢偱偡丅

偦傟偱偼丄戝偒側僼傽僀儖偺暅媽椺傪尒偰傒傑偟傚偆丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  stat <1387>                                                   劆
劆  Inode: 148004   Type: regular    Mode:  0644   Flags: 0x0   Version: 1  劆
劆  User:   503   Group:   100   Size: 1851347                              劆
劆  File ACL: 0    Directory ACL: 0                                         劆
劆  Links: 0   Blockcount: 3616                                             劆
劆  Fragment:  Address: 0    Number: 0    Size: 0                           劆
劆  ctime: 0x31a9a574 -- Mon May 27 13:52:04 1996                           劆
劆  atime: 0x31a21dd1 -- Tue May 21 20:47:29 1996                           劆
劆  mtime: 0x313bf4d7 -- Tue Mar  5 08:01:27 1996                           劆
劆  dtime: 0x31a9a574 -- Mon May 27 13:52:04 1996                           劆
劆  BLOCKS:                                                                 劆
劆  8314 8315 8316 8317 8318 8319 8320 8321 8322 8323 8324 8325 8326 8583   劆
劆  TOTAL: 14                                                               劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

忋婰僼傽僀儖偑僼儔僌儊儞僩壔偟偰偄側偄壜擻惈偼丄偦偙偦偙偁傞傛偆偵巚傢
傟傑偡丅 i-node 偵儕僗僩傾僢僾偝傟偰偄傞朻摢偺 12 僽儘僢僋 (偙傟傜偼偡
傋偰僨乕僞僽儘僢僋偱偡) 偼妋偐偵楢懕偟偰偄傑偡丅傑偢偙傟傜偺僽儘僢僋傪
暅媽偡傞偙偲偐傜巒傔傑偟傚偆丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fsgrab -c 12 -s 8314 /dev/hda5 > /mnt/recovered.001             劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙偙偱丄i-node 偵儕僗僩傾僢僾偝傟偰偄傞師偺僽儘僢僋丄偡側傢偪 8326 偼娫
愙僽儘僢僋側偺偱柍帇偱偒傑偡丅師偵偙偺娫愙僽儘僢僋偵懕偄偰 256 屄偺僨乕
僞僽儘僢僋偑楢懕偟偰偄傞偲怣偠傑偟傚偆 (8327 斣偐傜 8582 斣傑偱偱偡)丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fsgrab -c 256 -s 8327 /dev/hda5 >> /mnt/recovered.001           劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

i-node 偵昞婰偝傟偨嵟屻偺僽儘僢僋偼 8583 偱偡丅偙偙偱傕傑偨丄僼傽僀儖偺
僨乕僞僽儘僢僋偑楢懕偟偰偄傞傕偺偲傒側偟傑偡丅忋婰偱彂偒弌偟偨嵟屻偺僨
乕僞僽儘僢僋偼丄8327 + 225 = 8582 斣偱偟偨丅師偺 8583 僽儘僢僋偼擇廳娫
愙僽儘僢僋側偺偱柍帇偱偒傑偡丅偦偟偰偙偺僽儘僢僋偺屻偵丄娫愙僽儘僢僋
(偙傟偼柍帇) 偵懕偔 256 偺僨乕僞僽儘僢僋偑 256 慻懕偔傢偗偱偡丅偙傟傜傪
偡偽傗偔寁嶼偡傞偲丄師偺僐儅儞僪傪懪偮傋偒偩偲偄偆偙偲偵側傝傑偡丅擇廳
娫愙僽儘僢僋 8583 偲 (偍偦傜偔) 偦偺偡偖屻偵偁傞娫愙僽儘僢僋 8584 偼僗
僉僢僾偟偰丄僨乕僞僽儘僢僋偱偁傞 8585 偐傜巒傔偰偄傞揰偵拲堄偟偰偔偩偝
偄丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fsgrab -c 256 -s 8585 /dev/hda5 >> /mnt/recovered.001           劆
劆  # fsgrab -c 256 -s 8842 /dev/hda5 >> /mnt/recovered.001           劆
劆  # fsgrab -c 256 -s 9099 /dev/hda5 >> /mnt/recovered.001           劆
劆  # fsgrab -c 256 -s 9356 /dev/hda5 >> /mnt/recovered.001           劆
劆  # fsgrab -c 256 -s 9613 /dev/hda5 >> /mnt/recovered.001           劆
劆  # fsgrab -c 256 -s 9870 /dev/hda5 >> /mnt/recovered.001           劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

忋婰傪傑偲傔傞偲丄偙傟傑偱偵 12 + (7 * 256) 屄偺僽儘僢僋丄偡側傢偪 1804
屄偺僽儘僢僋傪彂偒弌偟偨偙偲偵側傝傑偡丅i-node 傪 stat 僐儅儞僪偱挷傋偨
寢壥偼丄'blockcount' 偱 3616 屄偲昞帵偝傟偰偄傑偟偨丅巆擮側偑傜丄偙偺昞
婰偱偺僽儘僢僋挿偼 (UNIX 偱偺揱摑傪堷偒宲偄偱) 512 僶僀僩偱寁嶼偝傟偰偄
傞偺偱丄幚嵺偼 1024 僶僀僩偱寁嶼偡傞偲 3616/2 = 1808 僽儘僢僋偲偄偆偙偲
偵側傝傑偡丅偮傑傝丄偁偲 4 僽儘僢僋懌傝側偄偩偗偩偲偄偆偙偲偱偡丅嵟屻偵
彂偒弌偝傟偨僽儘僢僋偼 10125 斣偱偁偭偨偺偱丄嵞搙偙傟傑偱偲摨條偵丄娫愙
僽儘僢僋(10126 斣)傪僗僉僢僾偟偰丄偦傟傜嵟屻偺 4 僽儘僢僋傪彂偒弌偟傑偡
丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # fsgrab -c 4 -s 10127 /dev/hda5 >> /mnt/recovered.001            劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

埲忋偱丄塣偑椙偗傟偽丄僼傽僀儖慡懱傪暅媽偡傞偙偲偵惉岟偟偨偙偲偵側傝傑
偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

11. i-node 傪捈愙偄偠傞

偙偺曽朄偼丄昞柺揑偵偼丄愭傎偳傛傝傕偢偭偲娙扨偱偡丅偟偐偟埲慜傕怗傟偨
捠傝丄 12 僽儘僢僋埲忋偺戝偒側僼傽僀儖偵懳偟偰偼栶偵棫偪傑偣傫丅

暅媽偟偨偄僼傽僀儖偦傟偧傟偵懳偟偰丄usage count 傪 1 偵愝掕偟丄deletion
time 傪 0 偵愝掕偟傑偡丅偙傟偵偼 debugfs 偺 mi (modify i-node) 僐儅儞僪
傪巊偄傑偡丅椺偲偟偰丄偙傟傑偱偲摨偠偔丄 i-node 148003 傪巊偭偰丄i-node
偺曄峏張棟傪愢柧偟傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  mi <148003>                                             劆
劆                            Mode    [0100644]                       劆
劆                         User ID    [503]                           劆
劆                        Group ID    [100]                           劆
劆                            Size    [6065]                          劆
劆                   Creation time    [833201524]                     劆
劆               Modification time    [832708049]                     劆
劆                     Access time    [826012887]                     劆
劆                   Deletion time    [833201524] 0                   劆
劆                      Link count    [0] 1                           劆
劆                     Block count    [12]                            劆
劆                      File flags    [0x0]                           劆
劆                       Reserved1    [0]                             劆
劆                        File acl    [0]                             劆
劆                   Directory acl    [0]                             劆
劆                Fragment address    [0]                             劆
劆                 Fragment number    [0]                             劆
劆                   Fragment size    [0]                             劆
劆                 Direct Block #0    [594810]                        劆
劆                 Direct Block #1    [594811]                        劆
劆                 Direct Block #2    [594814]                        劆
劆                 Direct Block #3    [594815]                        劆
劆                 Direct Block #4    [594816]                        劆
劆                 Direct Block #5    [594817]                        劆
劆                 Direct Block #6    [0]                             劆
劆                 Direct Block #7    [0]                             劆
劆                 Direct Block #8    [0]                             劆
劆                 Direct Block #9    [0]                             劆
劆                Direct Block #10    [0]                             劆
劆                Direct Block #11    [0]                             劆
劆                  Indirect Block    [0]                             劆
劆           Double Indirect Block    [0]                             劆
劆           Triple Indirect Block    [0]                             劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

忋婰偱丄挊幰偼 deletion time 偵 0 傪丄link count 偵 1 傪愝掕偟丄偦傟埲
奜偺僼傿乕儖僪偱偼偦偺傑傑儕僞乕儞僉乕傪墴偟傑偟偨丅暅媽偟偨偄僼傽僀儖
偑偨偔偝傫偁傞応崌丄偙偺曽朄偼妋偐偵偪傚偭偲柺搢偱偼偁傝傑偡偑丄傑偁側
傫偲偐側傞偲巚偄傑偡丅偙偆偟偨曽朄傪栰曢偩偲巚偆偺側傜丄偐傢偄偄乽僑儈
敔乿傾僀僐儞晅偒偺僌儔僼傿僇儖側 "僆儁儗乕僥傿儞僌僔僗僥儉" 偺曽傪偲偭
偔偵巊偭偰偄傞偼偢偱偟傚偆偐傜丅

偲偙傠偱丄mi 僐儅儞僪偺弌椡偵偼丄Creation time 偲偄偆僼傿乕儖僪偑偁傝傑
偡丅偙傟偼僂僜偱偡! (彮側偔偲傕岆夝偺慺偱偡丅) 幚嵺偵偼丄UNIX 僼傽僀儖
僔僗僥儉偱偼僼傽僀儖偺嶌惉帪傪抦傞偙偲偼偱偒傑偣傫丅峔憿懱 stat 偺儊儞
僶偱偁傞 st_ctime 偼丄i-node 偺峏怴帪娫傪帵偡傕偺偱偡丅偮傑傝 i-node 撪
偺壗傜偐偺忣曬偑嵟屻偵曄峏偝傟偨帪崗傪帵偟偰偄傞傢偗偱偡丅偲丄傑偁丄偙
偺榖偼偙偙傑偱丅

挊幰偑忋婰偺椺偱巊偭偨 debugfs 傛傝傕怴偟偄僶乕僕儑儞傪巊偆応崌偼丄椺戣
偱帵偟偨僼傿乕儖僪偺偄偔偮偐偑徣棯偝傟傞偐傕偟傟側偄偺偱拲堄偟偰偔偩偝
偄(摿偵丄Reserved1 偲 fragment 僼傿乕儖僪 (偺偄偔偮偐) 偼徣棯偝傟傞傛偆
偱偡)丅

i-node 偺曄峏偑嵪傫偩傜丄debugfs 傪廔椆偟偰丄埲壓偺傛偆偵偟偰偔偩偝偄丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  # e2fsck -f /dev/hda5                                             劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙傟偵偼師偺傛偆側堄枴偑偁傝傑偡丅偡側傢偪丄嶍彍偝傟偰偄偨偍偺偍偺僼傽
僀儖偼婛偵暥帤捠傝暅媽偟偰偄傞偺偱偡偑丄傑偩僨傿儗僋僩儕僄儞僩儕偵偼昞
帵偝傟側偄忬懺偱偡丅e2fsck 僾儘僌儔儉偼偙偺忬懺傪専弌偟偰丄偦偺僼傽僀儖
僔僗僥儉偺 /lost+found 僨傿儗僋僩儕撪偵屄乆偺僼傽僀儖偺僨傿儗僋僩儕僄儞
僩儕傪捛壛偡傞傛偆偵側偭偰偄傑偡丅 (偟偨偑偭偰僷乕僥傿僔儑儞偑捠忢 /usr
偵儅僂儞僩偝傟傞偺偩偲偡傞偲丄僼傽僀儖僔僗僥儉偑師偵儅僂儞僩偝傟偨嵺偵
丄暅媽僼傽僀儖偼 /usr/lost+found 偵尰傟傞傢偗偱偡丅) 偙偙傑偱棃傟偽丄偁
偲偼偦偺僼傽僀儖偺拞恎偐傜僼傽僀儖柤傪妱傝弌偟偰丄偦偺僼傽僀儖傪僼傽僀
儖僔僗僥儉僣儕乕偺揔愗側応強偵栠偡偩偗偱偡丅

e2fsck 傪幚峴偟偨嵺偵偼丄奺庬忣曬偑弌椡偝傟傞偲摨帪偵丄偳偺僟儊乕僕傪廋
暅偡傋偒偐偺幙栤偑昞帵偝傟傑偡丅"summary information" 傕偟偔偼曄峏偟偨
i-node 偵娭偡傞帠暱偑昞帵偝傟偨応崌偼丄偡傋偰 yes 偱摎偊偰偔偩偝偄丅偦
傟埲奜偺幙栤偵偮偄偰偼撉幰偺敾抐偵偍擟偣偟傑偡偑丄捠忢偼偡傋偰偺幙栤偵
yes 偱摎偊偰偍偔傎偆偑柍擄偱偡丅e2fsck 僐儅儞僪偑廔椆偟偨傜丄僼傽僀儖僔
僗僥儉傪嵞儅僂儞僩偱偒傑偡丅

幚偼丄e2fsck 傪巊偭偰僼傽僀儖傪 /lost+found 偵弌尰偝偣傞埲奜偺曽朄傕偁
傝傑偡丅debugfs 傪巊偊偽丄偦偺僲乕僪偵懳偡傞儕儞僋傪僼傽僀儖僔僗僥儉撪
偵嶌惉偱偒傞偺偱偡丅i-node 傪曄峏偟偨屻偱 debugfs 嶌惉偡傞偙偲偑壜擻偱
偡丅i-node 傪曄峏偟偨屻偱丄debugfs 偺 link 僐儅儞僪傪巊偄傑偡丅

劇劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劉
劆  debugfs:  link <148003> foo.txt                                   劆
劋劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劅劊

偙傟偵傛偭偰丄debugfs 僐儅儞僪偑惓偟偄偲敾抐偟偨僨傿儗僋僩儕撪偵
foo.txt 偲偄偆柤慜偺僼傽僀儖偑嶌惉偝傟傑偡丅偙偺 foo.txt 偲偄偆僼傽僀儖
偑丄撉幰偺媮傔偰偄偨僼傽僀儖偲側傞偼偢偱偡丅偨偩偙偺応崌偱傕丄e2fsck 傪
巊偭偰丄summary 忣曬傗 block count 摍傪廋暅偡傞昁梫偑偁傝傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

12. 彨棃揑偵偼傕偭偲娙扨偵側傞偱偟傚偆偐丠

側傝傑偡丅帠幚丄婛偵偦偆側偭偰偒偰偄傞偲挊幰偼峫偊偰偄傑偡丅偨偩丄愭傎
偳愢柧偟偨傛偆偵丄尰嵼偺埨掕斉僇乕僱儖 (2.0.x 僔儕乕僘) 偱偼丄i-node 偺
娫愙僽儘僢僋斣崋偼僼傽僀儖偺嶍彍帪偵僛儘偵栠偝傟偰偟傑偄傑偡丅偟偐偟偙
傟偼 2.1.x 僔儕乕僘偺奐敪斉僇乕僱儖偲 2.2.x 偺埨掕斉僇乕僱儖偵偼摉偰偼
傑傝傑偣傫丅崱偙傟傪彂偄偰偄傞擔帪偑 1999擭2寧2擔側偺偱偡偑丄悢擔慜偵僇
乕僱儖 2.2.1 偑儕儕乕僗偝傟偨偲偙傠偱偡丅1, 2 僇寧偡傟偽丄Linux 儀儞僟
乕偼 2.2.x 僇乕僱儖傪巊偭偨僨傿僗僩儕價儏乕僔儑儞傪嶌傝偼偠傔傞偱偟傚偆
丅

埨掕斉僇乕僱儖偱娫愙僽儘僢僋偵敽偆崲擄偑崕暈偝傟傟偽丄挊幰偑庤摦偱
i-node 傪偄偠傞偙偲偵斀懳偟偰偄偨榑嫆偺懡偔傕徚幐偟傑偡丅摨帪偵丄
debugfs 晅懏偺 dump 僐儅儞僪傪戝偒側僼傽僀儖偵懳偟偰巊梡偟偨傝丄傕偭偲
娙扨側懠偺暅媽僣乕儖傪巊偆偲偄偭偨偙偲偑壜擻偵側傞偱偟傚偆丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

13. 堦楢偺僾儘僙僗傪帺摦壔偡傞僣乕儖偼側偄偱偡偐丠

偁傞偙偲偼偁傝傑偡丅偨偩巆擮側偑傜偦傟傜偵偼丄庤摦偱 i-node 傪偄偠傞応
崌偲摨偠栤戣偑偁傝傑偡丅偮傑傝丄娫愙僽儘僢僋偺僨乕僞傪暅媽偱偒側側偄偺
偱偡丅偟偐偟慜弎偟偨傛偆偵丄偙傟偼墦偐傜偢栤戣偵側傜側偔側傞偐傕偟傟側
偄偺偱丄偙偙偱偦偆偟偨僾儘僌儔儉傪偞偭偲挱傔偰傒傞壙抣偼偁傝傑偡丅

挊幰偼丄e2recover 偲偄偆僣乕儖傪嶌惉偟傑偟偨丅偙傟偼 Perl 偱彂偐傟偨丄
幚幙揑偵偼 fsgrab 偺儔僢僷乕偱偡丅娫愙僽儘僢僋偺僽儘僢僋斣崋偑僛儘偵偝
傟偰偟傑偭偨応崌偱傕僼傽僀儖傪庢傝埖偊傞傛偆岺晇傪偙傜偟偰偁傝丄僼儔僌
儊儞僥乕僔儑儞偝偊側偗傟偽丄旕忢偵傛偄寢壥傪傕偨傜偡偲巚偄傑偡丅傑偨暅
媽偟偨僼傽僀儖偺僷乕儈僢僔儑儞 (偍傛傃壜擻側傜僼傽僀儖強桳幰偵偮偄偰傕)
傪惓偟偔愝掕偟丄暅媽偝傟偨僼傽僀儖偑尦偺僼傽僀儖僒僀僘偲堦抳偟偰偄傞偐
斲偐傕妋擣偟傑偡丅

e2recover 偼丄棃傞傋偒偙偺暥彂偺夵掶斉偺偨傔偵嶌惉偝傟傑偟偨丅偮傑傝崱
偺偲偙傠丄e2recover 梡偺徻偟偄夝愢偼丄偙偺暥彂偺師夞偺夵掶偺嵺偵婰嵹偡
傞傔偳偟偐棫偭偰偄側偄偲偄偆偙偲偱偡丅偨偩丄偦傟偼偦傟偲偟偰丄尰忬偱傕
e2recover 偼栶偵棫偮偼偢偱偡丅僟僂儞儘乕僪偡傞応崌偼挊幰偺僂僃僽僒僀僩
<http://pobox.com/~aaronc/tech/e2-undel/> 傪偍巊偄偔偩偝偄丅嬤偄偆偪偵
Metalab 偐傜傕僟僂儞儘乕僪偱偒傞傛偆偵側傞偲巚偄傑偡丅

Scott D. Heavner 偼丄lde丄偡側傢偪 the Linux Disk Editor 偺嶌幰偱偡丅偙
傟偼丄僶僀僫儕僨傿僗僋僄僨傿僞偱偁傞偲摨帪偵丄 debugfs 偺戙懼僣乕儖偲偟
偰 ext2 偲 minix 僼傽僀儖僔僗僥儉丄偍傛傃 xia 僼傽僀儖僔僗僥儉傪埖偆偙
偲偑偱偒傑偡 (偨偩偟 2.1.x 傗 2.2.x 僇乕僱儖偱偼 xia 偺僒億乕僩偼懪偪愗
傜傟偰偄傑偡)丅偦偟偰丄僼傽僀儖偺堦楢偺僽儘僢僋傪扝偭偨傝丄僨傿僗僋忣曬
傪専嶕偟偨傝偟偰丄僼傽僀儖偺暅媽嶌嬈傪庤彆偗偡傞婡擻傕晅偄偰偄傑偡丅傑
偨丄僼傽僀儖僔僗僥儉偺婎杮揑側奣擮傪弎傋偨椙幙偺暥彂偲丄暅媽偺嵺偺僣乕
儖偺巊偄曽傪弎傋偨暘偐傝堈偄暥彂偲偑揧晅偝傟偰偄傑偡丅lde 偺僶乕僕儑儞
2.4 偼丄Metalab <http://metalab.unc.edu/pub/Linux/system/filesystems/
lde-2.4.tar.gz> 傗偦偺儈儔乕僒僀僩丄偍傛傃嶌惉幰偺僂僃僽僒僀僩 <http://
www.geocities.com/CapeCanaveral/Lab/7731/lde.html> 偐傜擖庤偱偒傑偡丅

傕偆傂偲偮偺曽朄偲偟偰丄GNU Midnight Commander, mc 偑偁傝傑偡丅偙傟偼僼
儖僗僋儕乕儞偺僼傽僀儖娗棟僣乕儖偱偁傝丄挊幰偺抦傞尷傝丄 'NC' 偲屇偽傟
偰偄偨 MS-DOS 僾儘僌儔儉偑儀乕僗偵側偭偰偄傑偡丅mc 偼丄Linux 僐儞僜乕儖
傗 xterm 忋偱偺儅僂僗憖嶌傪僒億乕僩偟丄偝傜偵壖憐僼傽僀儖僔僗僥儉傪採嫙
偡傞偙偲偱丄tar 僼傽僀儖撪偵僨傿儗僋僩儕傪堏摦偡傞偲偄偭偨僩儕僢僋傕壜
擻偵側偭偰偄傑偡丅偦偺壖憐僼傽僀儖僔僗僥儉偺婡擻偺傂偲偮偲偟偰丄ext2 偱
偺僼傽僀儖偺暅媽偑偁傝傑偡丅巊偄傗偡偝偼敳孮偱偡丅偨偩丄幚嵺偺偲偙傠丄
挊幰帺恎偼巊偭偰偼偄傑偣傫丅屆偒椙偒偺僔僃儖僐儅儞僪曽幃偺傎偆偑岲偒偩
偐傜偱偡丅

暅媽婡擻傪巊偆偵偼丄僾儘僌儔儉傪 --with-ext2undel 僆僾僔儑儞傪晅偗偰
configure 傪幚峴偡傞昁梫偑偁傝傑偡丅傑偨 e2fsprogs 偵晅懏偡傞奐敪梡儔僀
僽儔儕偲僀儞僋儖乕僪僼傽僀儖傕昁梫偵側傝傑偡丅Debian GNU/Linux <http://
www.debian.org/> 偵摨崼偝傟偰偄傞 mc 偼丄梊傔偙偺僆僾僔儑儞晅偒偱價儖僪
偝傟偰偄傑偡丅懠偺僨傿僗僩儕價儏乕僔儑儞偱傕偍偦傜偔摨偠偩偲巚傢傟傑偡
丅僾儘僌儔儉偺價儖僪偑嵪傫偩傜丄mc 偵 cd undel:/dev/hda5 偲柦椷偟偰丄嶍
彍僼傽僀儖偺堦棗傪尒傞偙偲偑偱偒傑偡丅崱擔偺懡偔偺暅媽僣乕儖摨條丄mc 傕
僛儘杽傔偝傟偨娫愙僽儘僢僋傪忋庤偔埖偊傑偣傫丅堦斒偵丄戝偒側僼傽僀儖偺
朻摢 12k 偩偗偟偐暅媽偱偒側偄偙偲傕偁傝傑偡丅

嵟怴僶乕僕儑儞偼丄the Midnight Commander 偺 ftp 僒僀僩 <ftp://
ftp.nuclecu.unam.mx/Midnight/devel/>偐傜僟僂儞儘乕僪偱偒傑偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

14. 偁偲偑偒

彂偔偨傔偺帪娫偲丄偦傟偵抣偡傞僩僺僢僋偑偁傞尷傝丄偙偺暥彂傪掕婜揑偵峏
怴偟偰偄偒偨偄偲巚偭偰偄傑偡丅偮傑傝丄挊幰偼撉幰偐傜偺僐儊儞僩傪愗朷偟
偰偄傑偡丅暥復偑傕偭偲暘偐傝堈偔側傜側偄偐丄傛傝娙扨偵夝寛偡傞曽朄偼側
偄偐丄帺摦張棟傪偡傞怴偟偄僣乕儖偑弌偰偄側偄偐摍乆丄偙偺暥彂傗 fsgrab丄
e2recover 僣乕儖偵娭偡傞榖戣偑偁傟偽丄惀旕 <aaronc@pobox.com> 傑偱儊乕
儖傪偍憲傝偔偩偝偄丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

15. Credit 偲嶲峫暥專

        傕偟巹偑懠恖傛傝傕墦偔傪尒偰偄傞偲偡傞側傜丄偦傟偼丄巹         
        偑嫄恖偨偪偺尐偺忋偵棫偭偰偄傞偐傜偩丅                         
                                                                       
                                                 --Isaac Newton        

偙偺 mini-HOWTO 偼丄Robin Glover <swrglovr@met.rdg.ac.uk< 偑
comp.os.linux.misc 偵搳峞偟偨婰帠傪尦偵偟偰偄傑偡丅斵偺傾僀僨傾傪傕偲偵
偙偺 mini-HOWTO 傪嶌傞偙偲傪嫋壜偟偰偔傟偨 Robin 偵姶幱偟傑偡丅

傑偨偙偙偱丄杮彂偵偮偄偰挊幰偵儊乕儖傪憲偭偰偔傟偨偡傋偰偺恖偵傕丄傕偆
堦搙姶幱偟傑偡丅椼傑偟偺僐儊儞僩傪偄偨偩偄偰丄曬傢傟傞巚偄偱偡丅

埲壓偵丄嶲峫暥專傪偄偔偮偐徯夘偟傑偡丅

 

 丒 Frisch, Aelenn (1995), Essential System Administration, second
    edition, O'Reilly and Associates, Inc.. ISBN: 1-56592-127-5
   
 丒 Garfinkel, Simson, Daniel Weise and Steven Strassmann (1994), The
    Unix-Haters Handbook, IDG Books, ISBN: 1-56884-203-1. 偙偺暥彂偺戝
    敿偼丄乽帺暘偨偪乿偺僆儁儗乕僥傿儞僌僔僗僥儉偑 Unix 傛傝傕偢偭偲桪
    傟偰偄傞峫偊傞恖偨偪偵傛傞丄巕嫙偠傒偨偨傢偛偲偵偡偓偢丄巆傝偺戝敿
    傕丄 GNU 偺傛偆側弌棃偺偄偄儐乕僓嬻娫傪帩偭偰偄傞応崌偵偼慡偔摉偰偼
    傑傜側偄偙偲偽偐傝偱偡丅偲偼偄偊丄偔偩傜側偄婰弎偺拞偵傕丄岝傞傕偺
    偑側偄傢偗偱偼偁傝傑偣傫丅椺偊偽丄Unix 忋偱偺僼傽僀儖偺嶍彍偑偳傟傎
    偳埨堈偵峴傢傟摼傞偐偵偮偄偰偺媍榑偼丄撉傓偵抣偟傑偡丅
   
 丒 Glover, Robin (31 Jan 1996), HOW-TO : undelete linux files (ext2fs/
    debugfs), comp.os.linux.misc Usenet posting. 
   
 丒 Peek, Jerry, Tim O'Reilly, Mike Loukides et al (1993), UNIX Power
    Tools, O'Reilly and Associates, Inc./Random House, Inc., ISBN:
    0-679-79073-X. Second edition, 1998.
   
 

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

16. 朄揑側帠暱

彜昗偼偡傋偰丄偦傟偧傟偺強桳幰偑偦偺尃棙傪曐帩偟偰偄傑偡丅摿偵丄

 

 丒 MS-DOS 偲 Windows 偼丄Microsoft <http://www.microsoft.com/> 偺彜昗
    偱偡丅
   
 丒 UNIX 偼丄the Open Group <http://www.opengroup.org/> 偺彜昗偱偡丅
   
 丒 Linux 偼丄USA 偦偺懠偺崙偵偍偗傞 Linus Torvalds 偺彜昗偱偡丅
   
 

偙偺暥彂偼丄Copyright (c) 1997, 1999 Aaron Crane <aaronc@pobox.com> 偑
挊嶌尃傪曐帩偟偰偄傑偡丅偙偺暥彂偺斝晍偵偮偄偰偼丄偙偺挊嶌尃昞帵帺懱傪
娷傔偨慡暥慡懱偲偟偰丄帺桼偵斝晍偡傞偙偲傪嫋壜偟傑偡丅偟偐偟丄暥彂偺夵
曄偼丄挊幰傕偟偔偼 Linux Documentation Project 偺 HOWTO 僐乕僨傿僱乕僞
偺嫋戻偑側偄尷傝峴傢側偄偱偔偩偝偄丅斸昡傗堷梡栚揑偱丄偙偺暥彂偺嬐偐側
晹暘傪拃岅揑偵暋惢偡傞偙偲偼擣傔傜傟偰偄傑偡丅偦偺応崌丄暥彂偺暋惢偵嵺
偟丄堷梡尦傪揔愗偵昞帵偡傞側傜偽丄偙偺挊嶌尃昞帵傪婰嵹偡傞昁梫偼偁傝傑
偣傫丅

偙偺暥彂傪僐儞僺儏乕僞梡偺攠懱傕偟偔偼報嶞攠懱偱斕攧偟傛偆偲偡傞応崌丄
挊幰帺恎偐 Linux HOWTO 僐乕僨傿僱乕僞偵偦偺寁夋傪帠慜偵抦傜偣偰偔傟傞傛
偆婓朷偟傑偡丅偨偩丄偙傟偼偁偔傑偱婓朷偱偡丅

尰嵼偺 Linux HOWTO 僐乕僨傿僱乕僞偼丄Tim Bynum <
linux-howto@metalab.unc.edu> 偱偡丅

劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒劒 

17. 擔杮岅栿偵偮偄偰

岆帤丒扙帤丒岆栿摍偼 <JF@linux.or.jp> 傑偱偍抦傜偣偔偩偝偄丅

東栿丗 媑愳夒塸 <kikkawa@m.u-tokyo.ac.jp> (1997/10/16)
峑惓丗 拞栰晲梇                                       
       媏扟惤                                         
峏怴丗 愮扷桾巌 <ysenda@pop01.odn.ne.jp> (2001/09/11) 
峑惓丗 拞栰晲梇 <nakano@apm.seikei.ac.jp>             

