LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 07-11-2003, 11:37 AM   #1
XAGXAGUL
LQ Newbie
 
Registered: Jul 2003
Posts: 1

Rep: Reputation: 0
Time Of Deletion Log?


Is there a way to determine the exact time a file was deleted?
And if so, which user deleted it and so forth. And does linux have a recover deleted files program available.

Im using Redhat Linux 8
 
Old 07-11-2003, 05:56 PM   #2
Tinkster
Moderator
 
Registered: Apr 2002
Location: earth
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 917Reputation: 917Reputation: 917Reputation: 917Reputation: 917Reputation: 917Reputation: 917Reputation: 917
Nope, and depends.

The only thing you could do is set up
aide (or tripwire, or the like) to monitor
the filesystem and log activities like deletion.

Ext2(3) come with a undelete-feature, Reiser
doesn't, and for jfs and xfs I don't know :}

Cheers,
Tink
 
Old 07-12-2003, 12:55 AM   #3
Dark_Helmet
Senior Member
 
Registered: Jan 2003
Posts: 2,786

Rep: Reputation: 374Reputation: 374Reputation: 374Reputation: 374
Out-of-the-box, Tinkster is right.

However, you could MAKE your own log file. This might be more work than it's worth, but you can always write a script to replace the standard rm command. When the replacement script is used, you could have it create a small log somewhere saying what file was deleted, by whom, and what the time was. You could also mimic an undelete. Instead of actually deleting the file, you could compress it, and shove it into a hidden directory. But that would mean you'd have to manually clean it out every so often (sort of like the Trash can in the Red Hat Desktop and the Recycle Bin in Windows). And of course, once it's gone from there, it's gone for good.

Then again, you could go the standard route and just get in the habit of making backups.

It's all a matter of how much work you're willing to do for the feature.
 
Old 07-12-2003, 10:24 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594Reputation: 3594
I vaguely remember there's a library that's catch unlink calls, uses LD_SO_PRELOAD IIRC, shame I can't remember the URI, but it shouldn't be hard to Google for.

For Ext2/3 there are aprox 4 recovery utils and one recovery suite, see http://www.linuxquestions.org/questi...hreadid=45261, post #5
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Can't log in the second time Gyope Slackware - Installation 9 06-21-2005 06:18 AM
how to log into gnome twice at same time? PhenuxRizing Linux - General 6 09-12-2004 04:29 PM
Log reboot time? x5452 Linux - Software 2 03-30-2004 08:00 PM
how to get the time in the log ? cccc Programming 0 02-25-2004 05:58 PM
Can log files be time stamped? (such as FTP login and transfer log files) bripage Linux - Networking 6 08-08-2002 10:55 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 12:08 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration