Re: [sleuthkit-users] Help!! New to TSK and Linux

[Seth A. <sa...@im...>]

On Wed, Mar 16, 2005 at 04:16:54PM -0800, Brian Starr wrote:
> If I now attempt to create a directory called 'Directory' on this
> drive, I get the error Access denied to /mnt/hda1/Directory . One

File system permission semantics take some time to get used to. In order
for your user (lets call the account "brian" :) to create a directory in
/mnt/hda1, brian would need execute access to /mnt, to /mnt/hda1, and
write access to /mnt/hda1.

Run ls -ld / /mnt /mnt/hda1  -- this will show you information on all
three directories, so you can find out if you've got sufficient
permissions.

Typically, user accounts won't have such access to /mnt/<foo>.

> other thing, there is a lost+found lock ed directory on this drive
> subsequent to formatting.  Is that normal?

Every ext2 and ext3 filesystem has a lost+found directory, used when
running fsck(8). I've seen this idiom on other Unix systems, so it isn't
special to just ext2 and ext3, it is just those are the two filesystems
I use. :)