When a file is removed/ deleted/ unlinked, if it is still held open by any process then only the directory entry for the file is erased, not the file's data. When the file is completely closed by all process the data is returned to the free space pool. It's a feature since you can have anonymous files this way.
To see if you have any open deleted file on a filesystem, run one of these commands, where /mount/point is the mount point.
lsof +L1 /mount/point
Thank you for reading this article, please a comment if you are interested.
Tiến Phan - R0039
Knowledge is Endless
Sharing for Success
0 nhận xét:
Post a Comment