Date: Thu, 26 Aug 1999 11:39:57 +1000 From: Peter Jeremy <jeremyp@gsmx07.alcatel.com.au> To: uldisk@kb.lkb.bkc.lv Cc: freebsd-security@FreeBSD.ORG Subject: Re: undelete Message-ID: <99Aug26.113851est.40335@border.alcanet.com.au> In-Reply-To: <16996.935618248@localhost>
next in thread | previous in thread | raw e-mail | index | archive | help
"Jordan K. Hubbard" <jkh@zippy.cdrom.com> wrote: >> User, who was admin, and had wheel group, >> deleted /bin; /etc; /var directories from my FreeBSD 3.1. ... >No, you should simply reinstall them from a FreeBSD bin distribution It's worth point out that it isn't quite this simple. For /bin it'll work. In /etc, you'll need to go through and reconfigure most of the files (though for a simple setup, this should be limited to rc.conf, fstab, hosts, group, resolv.conf, exports and aliases). When you're rebuilding /etc/group, remember to leave that user out of wheel :-). /var is the most serious. Basically all you'll get out of the distribution is a set of empty directories. The contents are virtually all system dependent. In particular, you'll have lost records of what packages (if any) you've installed, users' mail (including any queued mail), games scores, cron jobs, at jobs, accounting information, backups of most of the critical files from /etc, etc. If someone would like to fix LFS so it works, creating an `undelete' command becomes much simpler... Peter To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?99Aug26.113851est.40335>