D
D
DVoropaev2019-10-14 16:24:06
linux
DVoropaev, 2019-10-14 16:24:06

What does "deleted" mean for a symbolic link?

I looked at the contents of the process pack (/proc/some_PID), and saw this:

# ls -l proc/2978
lrwxrwxrwx    1 root     root             0 Oct 11 10:50 exe -> /usb_bus (deleted)

I correctly understood that this file was deleted?
If so, why did I manage to successfully count it md5?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
K
ky0, 2019-10-14
@DVoropaev

Deleting a file and its corresponding handle are two separate operations. If fd is still active (for example, some process is using it), then even with a deleted file, you can touch its insides, including calculating their hash.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question