Re: Remove unrestricted_admin

[Dale Amon <amon@vnl.com>]

[-- Attachment #1: Type: text/plain, Size: 1572 bytes --]

On Sat, Sep 25, 2004 at 08:13:33PM -0400, Joshua Brindle wrote:
> I _really_ hope you aren't suggesting that you do a dd from a host disk 
> to something else while a machine is in production. This _will_ lead to 
> an inconsistant image and I don't think I need to explain why.

No, I umount the partition first. For system disks
I do the backup as described, with a root-nfs floppy
boot.

Last year I recovered data off a badly bolloxed Thinkpad
disk after someone knocked my laptop off a sofa while
I was travelling for several months. Lots of work had
to be recovered. I used the ability to seek to pull
all the undamaged blocks off and step around the 
blocks which locked up the IDE controller; then I
used a program to reassemble the saved blocks in
order with zero blocks where the destroyed areas
were... and then I loopback mounted the result and
recovered about 99.999%. Actually I recoverd 100%
of what matters.

Since I did this with an NFS boot, it doesn't 
matter to selinux (hell, last spring I was building
selinux into a ghost loopback and then dd'ing it to
the very slow test machines; only the
issue of umount/dd backup/mount of partitions matters
in general usage.

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]