frankie
--
He who fears the unknown may one day flee from his own backside.
-- Sinbad
> Only by changing the system time, and that is usually not a good idea.
>
Is it true? Maybe there are tools for editting inode table?
frankie
--
Real Programmers don't eat quiche. They eat Twinkies and Szechwan food.
Beacuse I am curious if it possible ;)
frankie
Since ctime is the last time the inode info was changed, you could
change the system date, make a new hardlink, remove it again and change
the date back.
Steven
Finally I've found debugfs tools for ext2/3 filesystems. There is
set_inode_field command so I can edit any inode field. But anybody know
in which format I should give the date/time?
frankie
--
Love thy neighbor, tune thy piano.
Generally speaking, the ctime can't be set arbitrarily. It's
effectively the one relatively high-integrity timestamp on files
(since, as you know, mtime and atime are arbitrarily "user"
settable). Of course one can make certain changes to the file, and
that will update the ctime to the current system time. Of course if
one has superuser (root) access, there are ways to bypass this. E.g.
change the system time (generally not recommended - especially moving
the clock back - most stuff doesn't expect time to go backwards, and
it typically will cause some stuff to fail or behave in unexpected
ways), or unmount the filesystem and edit the data on the filesytem
device (one can set the ctime arbitrarily that way ... and/or
introduce arbitrary corruption or other changes to the filesystem).
See also:
news:1147585091.3...@i39g2000cwa.googlegroups.com
news:1137497064.7...@g43g2000cwa.googlegroups.com