From mboxrd@z Thu Jan  1 00:00:00 1970
From: mkatiyar@gmail.com (Manish Katiyar)
Date: Mon, 30 May 2011 21:42:40 -0700
Subject: executable ELF is rm-ed from disk, but still running RAM..
In-Reply-To: <BANLkTik0UTP4tX9wZYo7A7F=0g48XOxNgg@mail.gmail.com>
References: <BANLkTin4m+-EOK-iGve_uquJT+VM4RRKfA@mail.gmail.com>
	<BANLkTi=Ro7h8p1D7C7Y=F8QzRV+4jAaEog@mail.gmail.com>
	<BANLkTimUcLExz5oVcSkUxqRRRW9KN7bMBA@mail.gmail.com>
	<BANLkTimh_-edzzR_4Dv0JJEZtn7rOzYyvA@mail.gmail.com>
	<BANLkTik0UTP4tX9wZYo7A7F=0g48XOxNgg@mail.gmail.com>
Message-ID: <BANLkTima=B180P0yp1ps124RpauVHtQuwA@mail.gmail.com>
To: kernelnewbies@lists.kernelnewbies.org
List-Id: kernelnewbies.lists.kernelnewbies.org

On Mon, May 30, 2011 at 8:45 PM, Mulyadi Santosa
<mulyadi.santosa@gmail.com> wrote:
> hi..
>
> On Tue, May 31, 2011 at 09:57, Manish Katiyar <mkatiyar@gmail.com> wrote:
>> How will "rm /bin/rm" work otherwise ?
>
> ok, makes me think another case....suppose we erase the related data
> blocks in the disk that correlate to running binary.... does Linux
> kernel follow that with erasing all the related page cache? or is it
> possible that temporarily cache of the disk blocks still survived?

I don't know for sure, but my guess is that the OS wouldn't notice it
till it goes out of cache and it has to reload.

-- 
Thanks -
Manish