On 15/04/15 13:38, Mikael Abrahamsson wrote: > On Wed, 15 Apr 2015, John Andre Taule wrote: > >> The guy that did this to us got 3 months jail. >> >> His argument was that we should have failed the system manually >> (removed the >> disk that he targeted with "dd"), and the raid should have magically >> fixed >> itself. Anyone think this would have worked? >> It was 5 hours of heavy write and deletes to the file system (ext4) >> and all >> that time the dd command where running. > > Not a chance, after 5 hours dd basically had overwritten 1/3 of the data > spread out across a large portion of the volume. We're talking massive > file and filesystem corruption. Wouldn't failing the drive and then adding it "as new" (triggering a rebuild) recover any files that hadn't been modified while the dd was running? Of course, that still means any directories that had been modified would likely have also been corrupted, in all probability landing the files in them into "lost+found" and necessitating a massive recataloging of all the files in there. The data would have been recovered, but the directory structure ... not a nice recovery job. Cheers, Wol -- To unsubscribe from this list: send the line "unsubscribe linux-raid" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
