Date: Sun, 2 Nov 1997 22:31:55 -0400 (GMT-0400) From: Snob Art Genre <ben@multivac.narcissus.net> To: Mikael Karpberg <karpen@ocean.campus.luth.se> Cc: Greg Lehey <grog@lemis.com>, freebsd-hackers@FreeBSD.ORG Subject: Re: Recovering Lost Inode? Message-ID: <Pine.NXT.3.96.971102223050.416A-100000@multivac.narcissus.net> In-Reply-To: <199710290207.DAA07672@ocean.campus.luth.se>
next in thread | previous in thread | raw e-mail | index | archive | help
If we could attach debuggers to running processes like in Mach, this would be trivial, no? On Wed, 29 Oct 1997, Mikael Karpberg wrote: > But, _if_ he had not killed the daemon, it would still be holding a > reference to the file. Maybe that could help, somehow? > > Is there in the case you know a program is holding a reference to a file, > but the file has no link from a directory, any possibility of doing > something like (after "kill -STOP" on the program, if it might terminate) > > syscall_saveme(procnum, the_procs_fd_for_the_file, "filename") > > as root to add a reference to the file referenced by a process? > > Or maybe something like > > syscall_copy_fds(procnum) > > that would allows a program get a copy of a running proc's filedescriptors > (like if it was forked from the proc). The second thing should allow for > reading it and copying it to a file, or possibly link it to a name, although > I can't think of a nice call to do that with, right now. > > If this is not possible right now, would it be hard to do, and does it > add any security holes? It seems it should, but I can't think of one. > > /Mikael > > > Ben "You have your mind on computers, it seems."
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NXT.3.96.971102223050.416A-100000>