3 ms·
> Yes, you can access them; but I don't believe you can link them. I think you can if you use debugfs. I wrote a post here about recovering a running binary af
by nemo1618 8y ago
> Yes, you can access them; but I don't believe you can link them.
I think you can if you use debugfs. I wrote a post here about recovering a running binary after deleting the file on disk: http://lukechampine.com/recoverbin.html http://lukechampine.com/recoverbin.html
- jwilk 8y agoHuh, I didn't know debugfs can operate on a mounted filesystem. Sounds incredibly dangerous... debugfs(8) manpage says that ln "does not adjust the inode reference counts". Is there a way to increase that number?
- adrianmonk 8y agoI haven't tried it, but based on the manpage, I would expect this to work: set_inode_field foo links_count 1
- deleted 8y ago[deleted]
- SpikedCola 8y agoWhy does it sound dangerous? (Genuinely curious, it looks like it could be a very useful tool in certain situations) I've never used it, but it appears to operate in read-only mode by default[0]: > -w > Specifies that the file system should be opened in read-write mode. Without this option, the file system is opened in read-only mode. [0] https://linux.die.net/man/8/debugfs https://linux.die.net/man/8/debugfs