[Karlsson]

Koostasin Debiani LiveCD baasil custom LiveCD iso tõmmise. Selle lasin dd abiga kõvakettale. Süsteem loetakse sealt ro reziimis. Aga mingi osa sellest opsüsteemist kirjutab oma andmeid kuskile. Näiteks, Debiani baasil Raspbian-i süsteemi osa sai läbi USB-i ühendatud selle arvutiga ja buutimisel loeti Raspbiani kujundus sellele custom Debianile. Ja see kujundus salvestati kuskile. Ja see olekski küsimus, kuhu? Kokku kettaid 4 (sda-sdc) ja partitsioone igal kettal umbes 2. Partitsioonid läbi uuritud ja juurkataloogides ei tuvastanud ka võõraid faile.
/dev/sdc1 sai dd abiga kopeeritud ja md5 kattus sellega mille samale partitsioonile lasin.
Seega kuhu on sellel LiveCd baasil aretisel võimalik veel andmeid salvestada?
/etc/fstab

Spoiler

aufs / aufs rw 0 0
tmpfs /tmp tmpfs nosuid,nodev 0 0

/etc/mtab

Spoiler

rootfs / rootfs rw,size=8156892k,nr_inodes=2039223 0 0
sysfs /sys sysfs rw,nosuid,nodev,noexec,relatime 0 0
proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0
tmpfs /run tmpfs rw,nosuid,relatime,size=3270036k,mode=755 0 0
/dev/sdd1 /lib/live/mount/medium iso9660 ro,noatime 0 0
/dev/loop0 /lib/live/mount/rootfs/filesystem.squashfs squashfs ro,noatime 0 0
tmpfs /lib/live/mount/overlay tmpfs rw,relatime 0 0
tmpfs /lib/live/mount/overlay tmpfs rw,noatime,mode=755 0 0
aufs / aufs rw,noatime,si=2eebe52c93538b61,noxino 0 0
devtmpfs /dev devtmpfs rw,nosuid,size=10240k,nr_inodes=2039226,mode=755 0 0
securityfs /sys/kernel/security securityfs rw,nosuid,nodev,noexec,relatime 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev 0 0
devpts /dev/pts devpts rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000 0 0
tmpfs /run/lock tmpfs rw,nosuid,nodev,noexec,relatime,size=5120k 0 0
tmpfs /sys/fs/cgroup tmpfs ro,nosuid,nodev,noexec,mode=755 0 0
cgroup /sys/fs/cgroup/systemd cgroup rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/lib/systemd/systemd-cgroups-agent,name=systemd 0 0
pstore /sys/fs/pstore pstore rw,nosuid,nodev,noexec,relatime 0 0
cgroup /sys/fs/cgroup/cpuset cgroup rw,nosuid,nodev,noexec,relatime,cpuset 0 0
cgroup /sys/fs/cgroup/cpu,cpuacct cgroup rw,nosuid,nodev,noexec,relatime,cpu,cpuacct 0 0
cgroup /sys/fs/cgroup/devices cgroup rw,nosuid,nodev,noexec,relatime,devices 0 0
cgroup /sys/fs/cgroup/freezer cgroup rw,nosuid,nodev,noexec,relatime,freezer 0 0
cgroup /sys/fs/cgroup/net_cls,net_prio cgroup rw,nosuid,nodev,noexec,relatime,net_cls,net_prio 0 0
cgroup /sys/fs/cgroup/blkio cgroup rw,nosuid,nodev,noexec,relatime,blkio 0 0
cgroup /sys/fs/cgroup/perf_event cgroup rw,nosuid,nodev,noexec,relatime,perf_event 0 0
systemd-1 /proc/sys/fs/binfmt_misc autofs rw,relatime,fd=21,pgrp=1,timeout=300,minproto=5,maxproto=5,direct 0 0
hugetlbfs /dev/hugepages hugetlbfs rw,relatime 0 0
mqueue /dev/mqueue mqueue rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
fusectl /sys/fs/fuse/connections fusectl rw,relatime 0 0
tmpfs /tmp tmpfs rw,nosuid,nodev,relatime 0 0
rpc_pipefs /run/rpc_pipefs rpc_pipefs rw,relatime 0 0
tmpfs /run/user/119 tmpfs rw,nosuid,nodev,relatime,size=1635020k,mode=700,uid=119,gid=127 0 0
tmpfs /run/user/1000 tmpfs rw,nosuid,nodev,relatime,size=1635020k,mode=700,uid=1000,gid=1000 0 0
gvfsd-fuse /run/user/1000/gvfs fuse.gvfsd-fuse rw,nosuid,nodev,relatime,user_id=1000,group_id=1000 0 0

/proc/self/mounts

Spoiler

rootfs / rootfs rw,size=8156892k,nr_inodes=2039223 0 0
sysfs /sys sysfs rw,nosuid,nodev,noexec,relatime 0 0
proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0
tmpfs /run tmpfs rw,nosuid,relatime,size=3270036k,mode=755 0 0
/dev/sdd1 /lib/live/mount/medium iso9660 ro,noatime 0 0
/dev/loop0 /lib/live/mount/rootfs/filesystem.squashfs squashfs ro,noatime 0 0
tmpfs /lib/live/mount/overlay tmpfs rw,relatime 0 0
tmpfs /lib/live/mount/overlay tmpfs rw,noatime,mode=755 0 0
aufs / aufs rw,noatime,si=aad68431b6c75ac4,noxino 0 0
devtmpfs /dev devtmpfs rw,nosuid,size=10240k,nr_inodes=2039226,mode=755 0 0
securityfs /sys/kernel/security securityfs rw,nosuid,nodev,noexec,relatime 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev 0 0
devpts /dev/pts devpts rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000 0 0
tmpfs /run/lock tmpfs rw,nosuid,nodev,noexec,relatime,size=5120k 0 0
tmpfs /sys/fs/cgroup tmpfs ro,nosuid,nodev,noexec,mode=755 0 0
cgroup /sys/fs/cgroup/systemd cgroup rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/lib/systemd/systemd-cgroups-agent,name=systemd 0 0
pstore /sys/fs/pstore pstore rw,nosuid,nodev,noexec,relatime 0 0
cgroup /sys/fs/cgroup/cpuset cgroup rw,nosuid,nodev,noexec,relatime,cpuset 0 0
cgroup /sys/fs/cgroup/cpu,cpuacct cgroup rw,nosuid,nodev,noexec,relatime,cpu,cpuacct 0 0
cgroup /sys/fs/cgroup/devices cgroup rw,nosuid,nodev,noexec,relatime,devices 0 0
cgroup /sys/fs/cgroup/freezer cgroup rw,nosuid,nodev,noexec,relatime,freezer 0 0
cgroup /sys/fs/cgroup/net_cls,net_prio cgroup rw,nosuid,nodev,noexec,relatime,net_cls,net_prio 0 0
cgroup /sys/fs/cgroup/blkio cgroup rw,nosuid,nodev,noexec,relatime,blkio 0 0
cgroup /sys/fs/cgroup/perf_event cgroup rw,nosuid,nodev,noexec,relatime,perf_event 0 0
systemd-1 /proc/sys/fs/binfmt_misc autofs rw,relatime,fd=21,pgrp=1,timeout=300,minproto=5,maxproto=5,direct 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
mqueue /dev/mqueue mqueue rw,relatime 0 0
hugetlbfs /dev/hugepages hugetlbfs rw,relatime 0 0
fusectl /sys/fs/fuse/connections fusectl rw,relatime 0 0
tmpfs /tmp tmpfs rw,nosuid,nodev,relatime 0 0
rpc_pipefs /run/rpc_pipefs rpc_pipefs rw,relatime 0 0
tmpfs /run/user/119 tmpfs rw,nosuid,nodev,relatime,size=1635020k,mode=700,uid=119,gid=127 0 0
tmpfs /run/user/1000 tmpfs rw,nosuid,nodev,relatime,size=1635020k,mode=700,uid=1000,gid=1000 0 0
gvfsd-fuse /run/user/1000/gvfs fuse.gvfsd-fuse rw,nosuid,nodev,relatime,user_id=1000,group_id=1000 0 0

df -aTh

Spoiler

Filesystem Type Size Used Avail Use% Mounted on
rootfs - - - - - /
sysfs sysfs 0 0 0 - /sys
proc proc 0 0 0 - /proc
tmpfs tmpfs 3.2G 9.1M 3.2G 1% /run
/dev/sdd1 iso9660 1.2G 1.2G 0 100% /lib/live/mount/medium
/dev/loop0 squashfs 1.1G 1.1G 0 100% /lib/live/mount/rootfs/filesystem.squashfs
tmpfs tmpfs 7.8G 0 7.8G 0% /lib/live/mount/overlay
tmpfs tmpfs 7.8G 0 7.8G 0% /lib/live/mount/overlay
aufs aufs 7.8G 38M 7.8G 1% /
devtmpfs devtmpfs 10M 0 10M 0% /dev
securityfs securityfs 0 0 0 - /sys/kernel/security
tmpfs tmpfs 7.8G 984K 7.8G 1% /dev/shm
devpts devpts 0 0 0 - /dev/pts
tmpfs tmpfs 5.0M 4.0K 5.0M 1% /run/lock
tmpfs tmpfs 7.8G 0 7.8G 0% /sys/fs/cgroup
cgroup cgroup 0 0 0 - /sys/fs/cgroup/systemd
pstore pstore 0 0 0 - /sys/fs/pstore
cgroup cgroup 0 0 0 - /sys/fs/cgroup/cpuset
cgroup cgroup 0 0 0 - /sys/fs/cgroup/cpu,cpuacct
cgroup cgroup 0 0 0 - /sys/fs/cgroup/devices
cgroup cgroup 0 0 0 - /sys/fs/cgroup/freezer
cgroup cgroup 0 0 0 - /sys/fs/cgroup/net_cls,net_prio
cgroup cgroup 0 0 0 - /sys/fs/cgroup/blkio
cgroup cgroup 0 0 0 - /sys/fs/cgroup/perf_event
systemd-1 - - - - - /proc/sys/fs/binfmt_misc
debugfs debugfs 0 0 0 - /sys/kernel/debug
mqueue mqueue 0 0 0 - /dev/mqueue
hugetlbfs hugetlbfs 0 0 0 - /dev/hugepages
fusectl fusectl 0 0 0 - /sys/fs/fuse/connections
tmpfs tmpfs 7.8G 36K 7.8G 1% /tmp
rpc_pipefs rpc_pipefs 0 0 0 - /run/rpc_pipefs
tmpfs tmpfs 1.6G 4.0K 1.6G 1% /run/user/119
tmpfs tmpfs 1.6G 32K 1.6G 1% /run/user/1000
gvfsd-fuse fuse.gvfsd-fuse 0 0 0 - /run/user/1000/gvfs
binfmt_misc binfmt_misc 0 0 0 - /proc/sys/fs/binfmt_misc

[A.S.]

Vastust küsimusele ei tea. Aga kunagi oli Windowsi jaoks selline hea asi, nagu Filemon, näitas kõiki failide lugemisi-kirjutamisi. Nüüd on see programmikene juba suure arengu läbi teinud ja nimigi teine, aga selles pole küsimus. See Filemon oli saadaval ka Linuxi versioonis, täiesti normaalselt töötas. Momendil seda vaevalt enam kusagilt leida on, kodukaski M$ firmale maha müüdud. Aga panna otsingusse "filemon for linux" ja midagi vast ikka leiab. Seega kui keegi küsimusele mõnd asjalikku vastust ei anna, õnnestub äkki sul omaenese jõududega vastus välja peilida.

[Karlsson]

Tänan A.S. Windows enda failiotsinguga oli ka võimalik kellaajaliselt faile uurida. Linuxis pidavat find käsk sama töö ära tegema.