[Discuss] recover contents of deleted but still open file on a Linux system.

[bogstad at pobox.com (Bill Bogstad)]

On Tue, Jul 7, 2020 at 10:54 AM Jerry Feldman <gaf.linux at gmail.com> wrote:
>
> Additionally, you can use debugfs along with the inode to create a link

Never used that command, but from the manual page it looks straight
forward to do so.
Two thoughts though:

1. debugfs appears to only work with ext* filesystems.   The
/proc/PID/fd method should work with XFS, ZFS, etc..
2.  debugfs appears to need read/write access to the disk partition.
The method I suggested can be
used by any unprivileged user who accidentally removes the output file
of a long running program.

Bill Bogstad