-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/04/2013 11:01, David Sommerseth wrote:
> On 09/04/13 10:48, Steven Haigh wrote:
>> On 09/04/13 18:29, vivek chalotra wrote:
>>> Hello all,
>>>
>>> One of my friend has deleted all the data in /home by mistake using  rm
>>> -rf command.
>>> She actually used $ rm -rf ~
>>> Now is there any way to recover that precious data.
> 
> Depending on the file system ... it maybe possible, at least to some
> degree.  I doubt it's a VFAT/FAT file system as that's fairly trivial.
> If the file system is ext[234], you may be lucky and restore files using
> the 'debugfs' utility.  But that requires the filesystem to be unmounted
> and not modified much at all.  And I believe you'll have a challenge
> mapping file contents with new file names.
> 
> If you use any other file system, like xfs, jfs, btrfs ... you are
> dependent on utilities provided for those file systems.  Unfortunately I
> don't know much about available tools here.
> 
> Maybe tools like 'TestDisk' [1] may be of more help too.
> 
> [1] <http://www.cgsecurity.org/wiki/TestDisk>

you may want to take a look to photorec, too:
http://www.cgsecurity.org/wiki/PhotoRec

you probably need to take a snapshot of the filesystem
(hoping it has not been modified too much)

I hope it helps!


Gilberto


- -- 
- --
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=Gwlm
-----END PGP SIGNATURE-----