markmc did some code that shows how to read the format a few years ago here:
http://people.gnome.org/~markmc/code/merge-dm-snapshot.c
Otherwise look at dm-snap-persistent.c in the kernel tree.
Alasdair
Users can easily exhaust a LiveUSB snapshot overlay by writing
too many changes to the OS filesystem, such as by performing
a yum update.
Would such an 'exhausted' overlay be amenable to some sort of
data recovery or forensics?
If so, how so; if not, why not?
(or suitable references)
Thanks, --Fred
-- dm-devel mailing list dm-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/dm-devel
