[SOLVED] Samba Server Deleting Question

[L3l00]

Just curious say there are files on the smb shared folder, on a remote computer it gets deleted (on purpose), where does it actually go? My boss deleted a bunch of scanned documents on purpose asked why her recycle bin was empty. Kind of made me wonder, I checked the server and the folders shared locations recycle bin and it's empty too.

?

[DBelton]

did you set up samba to use a recycle bin?

check out vfs_recycle (man vfs_recycle) if you wish to configure samba to use a recycle bin.

But, unless you configure samba to use a recycle bin, then files are deleted permanently.

[Doug G]

Immediate and permanent deletion of files deleted over the network is the normal from every version of Windows I've used too. There is I think some add-on network recycle bin program for windows but I just try to be extra-careful when working on networked files.

[L3l00]

Okay ^-^
that's what I thought, ya no it is not necessary to have samba use recycle bin. If they delete it I do have a nice backup contigency plan. Just comforting to know if deleted off the network it's gone and no forensic linux tools can bring it back from the grave (if it's personal data).

[DBelton]

no, it's not gone in that respect.

The only way you can delete something and not be able to dig it up using forensic tools is if it's over-written several times.

It is gone so that just a normal "undelete" can't bring it back, but the data is still on the drive until it is over-written.

It's pretty much the same as any other delete, it removes the directory entries, but the data is still there.

There are wipe tools if you are really concerned with protecting private data.

[beaker_]

I normally save the future f up by using vfs recycle and then veto said directory.

---------- Post added at 02:36 PM ---------- Previous post was at 02:35 PM ----------

Also look into clamscan's module.

[L3l00]

Beaker - That's actually a million times better than what I am doing. Thanks for some alternative methods.

[Dutchy]

This vfs_recycle is a very handy feature!
The only problem I have with it is that acts more like a kind of backup / versioning tool because it also will put files in the .recycle bin that you overwrite instead of just the deleted ones.

Edit: looks like this is (in my case) because of the overwritten file gets stored with a new inode.

[beaker_]

Just stating to obvious: you need to take provisions (manual, cron task) to empty out the recycle bin if you veto it. Otherwise you'll just fill space.

---------- Post added at 08:55 AM ---------- Previous post was at 08:53 AM ----------

Late Edit: Or you could give samba a split personality where it's not veto'd for X Y & Z.