Hi Jean-Pierre,
> The "no error found" means that all your ACLs
> were processed successfully, but you may have
> other errors (files which cannot be opened, etc.)
> Of course, bugs sometimes do occur...
I just wanted to confirm if I misunderstood the man page of
"ntfs-3g.secaudit" and the exit status has a certain mean.
Now I can understand my circumstance, thanks.
> An easy way to do is to backup the result with
> option "-bv", filter the lines starting with "# File"
> and sort the result. Then compare with the result
> of the same procedure applied to source volume :
>
> ntfs-3g.secaudit -bv device | grep "^# File" | sort
>
> Then, doing a diff will tell you whether the ACLs in
> both volume have the same hashcodes, which gives
> a reasonable probability of being the same.
I tried this and am confusing.
I used "ntfs-3g.secaudit" with "bv" options for both of source and
destination devices and the results are quite different from each other.
I saved the result for the source device into "sec-bv-DD.data",
and saved the result for the destination device into "sec-bv-LV.data"
and saved the result of "diff sec-bv-DD.data sec-bv-LV.data" into "sec-bv.diff".
I then use "wc -l" for these files and "wc" showed me this
wc -l sec-bv-DD.data sec-bv-LV.data sec-bv.diff
61190 sec-bv-DD.data
61245 sec-bv-LV.data
52066 sec-bv.diff
174501 total
??? I doubt "sec-bv.diff" has too much lines ???
> I have personnally never used guest OSes, and
> I cannot provide any advice for such configuration.
Yes, this complexity is the problem I must deal with by myself,
I understand it.
>> The Restore Operations I did were:
>>
>> # I used ntfs-3g-2009.11.14 and an Redhat EL 5.4(x86-64)
>> # system as host OS and a Windows 2008 R2 (x86-64) system as guest OS.
>>
>
>
>> # ntfs-3g.secaudit -se /dev/mapper/loop0p2 sec.data
>>
>> The execution of this command producted many messages of its progress
>> and eventually it output the following messages
>>
>> ! No errors were found
>> 75186 ACLs have been applied
>>
>> * But the command exited with 1.
>>
>
> Did you save the output ? There must be an error
> message, easily identified by an '*' as the first
> character.
I searched my log but it contained no '*' at all.
>
>> 9. Boot the restored Windows 2008 system
>>
>> The Windows 2008 system seems to start normaly.
>>
>
> I still warn you against the fact that you have
> only restored the ACLs, not the short names,
> the junctions, the object_ids, ... ntfs-3g.secaudit
> does only process security oriented data.
>
> You may get into trouble because of that. Files
> are sometimes designated by short names in the
> registry, Vista uses junctions, and object_ids
> are used in shortcuts...
>
> ntfscp copies all these.
Your advice is very helpful for me.
I incline to use "ntfscp" for my purpose, but I have another
question.
To backup whole of a ntfs by "ntfscp", it needs a list of
the names of all objects in the ntfs. The objects are consist of
files, directories, junctions, alternate data streams and so on.
How can I get this list? Simply mount the ntfs and list the object
names by "find"?
==========================================================
I have a shell script to investigate this problem and some
log files with it.
I you want them for your information, I will be delighted to
send them to you. But the total size of them is nealy 2.5Mbytes
even if they are compressed.
Sincerely yours.
|