[Leaplist] recover deleted file

[Randall Perry]

On 3/7/07, Richard F. Ostrow Jr. <kshots at warfaresdl.com> wrote:
> 1. At this point, NEVER mount the drive with write access, until you are
> satisfied that you have recovered all the data you can. Any write to the
> disk potentially over-writes data that was "cleared" by the rm you ran.
correct.
Fortunately, I had already done that.
And it is handy that I can use mc to access the drive without it being mounted.

>
> 2. Boot to another OS (perhaps a LiveCD) or another hard drive. When you
> mount the drive, make sure you pass the -ro option (read-only).
No need.
This is a 'data only' drive.  The entry I added to /etc/fstab when I
installed that drive years ago was changed to ro.
No worries there.
>
> 3. At this point you can poke around without fear of doing further damage.
the key is to know which stick to do the poking with.
..and if something oozes to not poke it there anymore.
-- 
*:-.,_,.-:*'``'*:-.,_,.-:*'``'*:-.,_,.-:*'``'*:-.,_,.-:*'``'*:-.
    Randall Perry
    Hope Crisis Response Network
  www.hcrn.info