UNIX for Advanced & Expert Users

How to do this ? ( out of curiosity )
Did you mean the following steps ?

1) dup the file descriptor ( that is known )
2) use the new file descriptor to iterate through the contents of the file and store it again

Could you please shed more light on this ?

In the case of OS'es with /proc available, you can use lsof to get the file handle number of the file in question (lsof -p pid /dev/dsk/disk-in-question) then copy the contents of /proc/<pid>/fd/<handle number>.

Hello everyone.

So .. yeah.. I was cleaning up and. darn the luck . I scrubbed a bit too hard.

Nothing critically important lost. Just some old pics that would be nice to have and thought I had copied them. I am trying out the CGSecurity utility recomended by rajamohan.

I will keep you posted how it works. There was next to no disk activity after the delete. realized I did something dumb in about 3 seconds. unmounted the fs and giving the utility a try.

Yeah it worked like a champ. Turns out I panicked and actually DID copy the files i thought I lost. I guess burning the candle on 2 ends 4 sides and behind will cloud one's judgment.

Anyways. the GC sec tool worked well. It pulled stuff off the disk I had long forgotten about.