Click to See Complete Forum and Search --> : Reading inode information ?


berb
12-10-2001, 02:06 PM
Does anyone know how to read (hex,oct,bin,string) inode information? From the CLI? A utility?
A little help?
Can I get a witness?

TIA

[ 10 December 2001: Message edited by: berb ]

Strike
12-10-2001, 03:06 PM
I don't know of any actual utilities that allow you to do it (as I have yet to be convinced that it is a useful thing to do). But you can code your own...

Why do you want to change your inodes? In general, your kernel knows far better what to do with them than you do.

berb
12-10-2001, 03:23 PM
I don't want to change 'em just look at 'em. It was a question at my thesis defense, "Can the SID be spoofed"? In regards to SELinux, wondering if the SID of a file can be spoofed to gain/elevate file privlage off the inode field. The SELinux developers assign a new Security ID (SID) to the last field of the inode struct, which was left unassigned for some reason (unsigned 32 bit long, if you wanted to know). I want to know if I can read the inode information, can a hex viewer do it, read raw file information off the disk?