Yes we can , but the recovered files after running fsck on the filesystem will have absurd names like #p89t3590, hence containing correct owner, group and inode info but will not have correct names.
Files that appear in lost+found are typically files that were already unlinked (i.e. their name had been erased) but still opened by some process (so the data wasn't erased yet) when the system halted suddenly (kernel panic or power failure)
Files can also appear in lost+found because the filesystem was in an inconsistent state due to a software or hardware bug.
No comments:
Post a Comment