debian/0000755000000000000000000000000012260350702007163 5ustar debian/compat0000644000000000000000000000000212135252576010374 0ustar 9 debian/copyright0000644000000000000000000000547312135252576011142 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: ext4magic Source: http://developer.berlios.de/projects/ext4magic Files: * Copyright: 2010-2012 Roberto Maar License: GPL-2.0+ Files: src/block.c Copyright: 1993-1996 Theodore Ts'o License: GPL-2.0+ Files: src/ext2fsP.h Copyright: 1997 Theodore Ts'o License: GPL-2.0+ Files: src/kernel-jdb.h Copyright: 1998-2000 Red Hat, Inc (contact: Stephen C. Tweedie ) License: GPL-2.0+ Files: src/magic.h Copyright: 2003 Christos Zoulas License: Simplified BSD License Files: debian/* Copyright: 2013 Joao Eriberto Mota Filho License: GPL-2.0+ License: GPL-2.0+ This package is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. . This package is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this program. If not, see . On Debian systems, the complete text of the GNU General Public License version 2 can be found in "/usr/share/common-licenses/GPL-2". License: Simplified BSD License Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice immediately at the beginning of the file, without modification, this list of conditions, and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. . THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. debian/docs0000644000000000000000000000001412135252576010044 0ustar README TODO debian/patches/0000755000000000000000000000000012260344505010616 5ustar debian/patches/series0000644000000000000000000000003612260343770012035 0ustar ext4magic.8.patch ext4magic.c debian/patches/ext4magic.8.patch0000644000000000000000000001123612135252576013704 0ustar Description: fix hiphens and some errors in manpage. Author: Joao Eriberto Mota Filho Last-Update: 2013-04-15 --- a/src/ext4magic.8 +++ b/src/ext4magic.8 @@ -1,6 +1,6 @@ .TH ext4magic 8 "Oct 2011" "version 0.2.3" "Administrations Tool" .SH NAME -ext4magic \- allows to recover deleted files on ext3/4 filesystems +ext4magic \- recover deleted files on ext3/4 filesystems .SH SYNOPSIS .B ext4magic {\-M|\-m} [\-j ] [\-d ] @@ -100,7 +100,7 @@ , only display the corresponding data blocks for this data . The optional option .B \-x -allows a additional transmission time of the transactions, but only if the block is a Inode block. The print is in the same order as the data in journal. You can make conclusions from the data received in the Journal. +allows an additional transmission time of the transactions, but only if the block is a Inode block. The print is in the same order as the data in journal. You can make conclusions from the data received in the Journal. After the import of backups or after change of timestamps of files, the additional transmission time will display not always the real transmission time. If here absolutely incorrect time entries, then check if you using a journal of a read-write open file system. @@ -214,7 +214,7 @@ /home/usr1/Document " you can use now .B - # ext4magic /dev/sda3 -f usr1/Document + # ext4magic /dev/sda3 \-f usr1/Document The root directory of the filesystem you can use @@ -253,7 +253,7 @@ is the block number of the backup superblock this depends on the block size. Use the same values as with "fsck" or "debugfs" or use the output of .B -"mkfs -n .." +"mkfs \-n .." to determine the correct value. Use the options necessarily in the order @@ -322,7 +322,7 @@ "after" set to a value at which the data available. Inodes and directory data with other timestamps will be skipped and not used. Default, without any time option, ext4magic will search with "now" for the internal time "before", and -"now -24 hour" for the internal time "after". If you try to recover without any time option, so you search only over the last 24 hours. If you wait a couple of days before you try to recover deleted data, you must always use time options, or you find nothing +"now \-24 hour" for the internal time "after". If you try to recover without any time option, so you search only over the last 24 hours. If you wait a couple of days before you try to recover deleted data, you must always use time options, or you find nothing .TP .B @@ -582,7 +582,7 @@ Examples of simple Recover .B - # ext4magic /dev/sda3 \-r \-f user1/picture/cim01234.jpg -d /tmp + # ext4magic /dev/sda3 \-r \-f user1/picture/cim01234.jpg \-d /tmp Recover the file "/home/user1/picture/cim01234.jpg" which has just been deleted. The file system is mounted normally under "/home". Note the file path is specified from the root directory of the file system and not from the root of the entire Linux system. Whenever possible, umount the file system for the recover. The file will be written as "/tmp/user1/picture/cim01234.jpg" @@ -597,7 +597,7 @@ .B - # ext4magic /dev/sda3 \-R \-a $(date -d "\-5day" +%s) + # ext4magic /dev/sda3 \-R \-a $(date \-d "\-5day" +%s) Attempts to recover all files, even if they are already partially overwritten, recover also all not deleted files. The erase time is 4 days ago. @@ -607,16 +607,16 @@ .B # ext4magic /dev/sda3 \-M \-d /home/recover -try multi-stage recover of all files after the filesystem is deleted with a "rm -rf *" . Write the files to "/home/recover". (on ext4 : in this version skipped the last step.) +try multi-stage recover of all files after the filesystem is deleted with a "rm \-rf *" . Write the files to "/home/recover". (on ext4 : in this version skipped the last step.) .B # ext4magic /dev/sda3 \-RQ \-f user1/Dokuments \-a 1274210280 \-b 1274211280 \-d /mnt/testrecover -try to restore the directory tree "user1/Dokuments/". The "-b" timestamp you must set just before deleting files, the "-a" timestamp prevents found old file versions. This will only work well, if you've there created or deleted files bevor the "-b" timestamp. Write to the directory "/mnt/testrecover/". If only a few files recovers, attempts the same without the option +try to restore the directory tree "user1/Dokuments/". The "\-b" timestamp you must set just before deleting files, the "\-a" timestamp prevents found old file versions. This will only work well, if you've there created or deleted files bevor the "\-b" timestamp. Write to the directory "/mnt/testrecover/". If only a few files recovers, attempts the same without the option .B --Q +\-Q debian/patches/ext4magic.c0000644000000000000000000000166512260344505012657 0ustar Description: fix spelling errors. Author: Joao Eriberto Mota Filho Last-Update: 2013-12-30 --- a/src/ext4magic.c +++ b/src/ext4magic.c @@ -627,13 +627,13 @@ fprintf(stderr,"Error: Invalid parameter: -s %d\n", superblock); switch (blocksize){ case 1024: - fprintf(stderr, "blocksize 1024 posible 8193, 24577, 40961, 57345 ....\n"); + fprintf(stderr, "blocksize 1024 possible 8193, 24577, 40961, 57345 ....\n"); break; case 2048: - fprintf(stderr, "blocksize 2048 posible 16384, 49152, 81920, 114688 ....\n"); + fprintf(stderr, "blocksize 2048 possible 16384, 49152, 81920, 114688 ....\n"); break; case 4096: - fprintf(stderr, "blocksize 4096 posible 32768, 98304, 163840, 229376 ....\n"); + fprintf(stderr, "blocksize 4096 possible 32768, 98304, 163840, 229376 ....\n"); break; default: fprintf(stderr, "blocksize unknown\n"); debian/source/0000755000000000000000000000000012260341231010460 5ustar debian/source/lintian-overrides0000644000000000000000000000015212260341272014044 0ustar # The upstream didn't provide a PGP/GPG signature. ext4magic source: debian-watch-may-check-gpg-signature debian/source/format0000644000000000000000000000001412135252576011704 0ustar 3.0 (quilt) debian/control0000644000000000000000000000261112260343110010561 0ustar Source: ext4magic Section: utils Priority: optional Maintainer: Debian Forensics Uploaders: Joao Eriberto Mota Filho Build-Depends: debhelper (>= 9.0.0), autotools-dev, e2fslibs-dev, libblkid-dev, libbz2-dev, libmagic-dev, zlib1g-dev Standards-Version: 3.9.5 Homepage: http://developer.berlios.de/projects/ext4magic Vcs-Git: git://anonscm.debian.org/forensics/ext4magic.git Vcs-Browser: http://anonscm.debian.org/gitweb/?p=forensics/ext4magic.git Package: ext4magic Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Description: recover deleted files from ext3 or ext4 partitions ext4magic is a file carver (or file carving). It can be used when recovering from disasters or in digital forensics activities. . The deletion of files in ext3/4 filesystems can not be easily reversed. Zero out of the block references in the inodes makes that impossible. Experiences with other programs have proved that is possible restore sufficient information for a recover of many data files, directly from the filesystem journal. . ext4magic can extract the information from the journal and restore files in an entire directory tree, if the information in the journal are sufficient. . This tool can recover the most file types, with orginal filename, owner and group, file mode bits and also the old atime/mtime stamps. debian/changelog0000644000000000000000000000126712260350346011047 0ustar ext4magic (0.3.1-2) unstable; urgency=medium * debian/control: - Bumped Standards-Version from 3.9.4 to 3.9.5. - Updated the Vcs-Git to use canonical URL. * debian/gbp.conf: added to allow git-buildpackage use. * debian/rules: - Added --enable-expert-mode to dh_auto_configure. - Removed some comments. * debian/source/: added an override to reply to check-gpg-signature. * debian/watch: improved. -- Joao Eriberto Mota Filho Mon, 30 Dec 2013 16:42:20 -0200 ext4magic (0.3.1-1) unstable; urgency=low * Initial release (Closes: #705413) -- Joao Eriberto Mota Filho Mon, 15 Apr 2013 16:35:05 -0300 debian/watch0000644000000000000000000000010512260337744010223 0ustar version=3 http://sf.net/ext4magic.berlios/ext4magic-(\d\S*)\.tar\.gz debian/rules0000755000000000000000000000023312260350452010243 0ustar #!/usr/bin/make -f #export DH_VERBOSE=1 %: dh $@ --with autotools-dev --parallel override_dh_auto_configure: dh_auto_configure -- --enable-expert-mode debian/gbp.conf0000644000000000000000000000006512260350531010603 0ustar [DEFAULT] debian-branch = debian pristine-tar = True