LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 03-17-2010, 11:10 PM   #1
s2cuts
Member
 
Registered: Mar 2007
Posts: 61

Rep: Reputation: 18
LVM: reading the contents of just a part of the LVM...


I'm trying to figure out how easy it would be to read the contents of a physical disk that was part of a larger logical volume. The disk contains a "Linux LVM" partition that spans its entire size.

My problem is that one of my disks died, and I have to send it back for a warranty replacement. However, the disk is dead, and I can't zero it out. I'm just trying to assess how difficult it would be (or at least how likely it would be) for a tech that's checking out the disk to get at the data.

Thanks for any help.
 
Old 03-18-2010, 06:30 AM   #2
smoker
Senior Member
 
Registered: Oct 2004
Distribution: Fedora Core 4, 12, 13, 14, 15, 17
Posts: 2,279

Rep: Reputation: 248Reputation: 248Reputation: 248
It's unlikely that it will even get looked at. It probably will go straight into a skip. The metadata for the LVM won't be there so they will have to use forensic tools to examine it.
 
Old 03-18-2010, 12:17 PM   #3
s2cuts
Member
 
Registered: Mar 2007
Posts: 61

Original Poster
Rep: Reputation: 18
Quote:
Originally Posted by smoker View Post
It's unlikely that it will even get looked at. It probably will go straight into a skip. The metadata for the LVM won't be there so they will have to use forensic tools to examine it.
Thanks smoker, that's music to my ears (or eyes as it were).

Does anybody else want to weigh in?
 
Old 03-18-2010, 12:58 PM   #4
frndrfoe
Member
 
Registered: Jan 2008
Distribution: RHEL, CentOS
Posts: 375

Rep: Reputation: 38
It would be trivial to recover files from the disk using something like Foremost as long as the disk spins and is readable. If it is physically damaged you may have to replace the circuit board or swap the platters into a working drive. At that point you have to determine the "value of privacy" of the content on the drive and act accordingly.
Keep in mind that people in forensics often buy used hard drives just for forensic exercises.
Do you trust them to shred the drive? I wouldn't, that costs money.
 
Old 03-18-2010, 01:19 PM   #5
smoker
Senior Member
 
Registered: Oct 2004
Distribution: Fedora Core 4, 12, 13, 14, 15, 17
Posts: 2,279

Rep: Reputation: 248Reputation: 248Reputation: 248
@frndrfoe
If the disk spins and was readable he wouldn't be throwing it out.

And how many faulty drives do they get back every day ?
My friend worked on laptop repair for a well known company, and if they got returns, they went in the bin. They were literally walking around on top of laptop motherboards that had been discarded.
Your drive is not likely to be the one out of hundreds that they decide to take to pieces and rebuild just to see if there's something on it.
 
  


Reply

Tags
logical, lvm, read, volume


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LVM not showing contents USB drives after reboot gGuzz Linux - Newbie 2 10-12-2009 03:46 PM
lvm ontop of raid10 or combine two raid1 via lvm? okar Linux - Server 3 09-11-2009 02:37 PM
LXer: Using LVM on AIX Unix. Part One Of No More Than Two. LXer Syndicated Linux News 0 07-05-2008 04:50 AM
LVM and multiple iSCSI disks performance of LVM xxx_anuj_xxx Linux - Server 4 05-01-2008 12:26 PM
LXer: Back Up (And Restore) LVM Partitions With LVM Snapshots LXer Syndicated Linux News 0 04-17-2007 11:16 AM


All times are GMT -5. The time now is 05:30 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration