Hi there,
My question is as follows, is it possible to simply copy the data files
to their correct location and getting access to the databases as they
looked at the time of the hacking attempt?
I should have the exact same setup before the hack as after, no version
changes or anything.
If the database was running when the files were backed up, then just copying
them over is very unlikely to work.
The thing is, there was no backup. The machine was hacked and someone did
an 'rm -rf *' on / and I don't know if it removed the postgres program
first or the datafiles first, nor do I know if that matters.
Also, the main data files also exist (I copied the data folder to its
correct place as the restoring technique), I can select from the actual
data, only the pg_* tables seem to be missing since I can't dump the
database or do \d on any tables.
Archie
