Reopen a file descriptor with another access?

by

Yes! The trick is to access the deleted file via /proc/self/fd/n. It’s a linux-only trick, as far as I know.

Run this program:

#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>

int main() {
    FILE* out_file;
    FILE* in_file;
    char* dev_fd_path;
    char buffer[128];

    /* Write “hi!” to test.txt */
    out_file = fopen("test.txt", "w");
    fputs("hi!\n", out_file);
    fflush(out_file);

    /* Delete the file */
    unlink("test.txt");

    /* Verify that the file is gone */
    system("ls test.txt");

    /* Reopen the filehandle in read-mode from /proc */
    asprintf(&dev_fd_path, "/proc/self/fd/%d", fileno(out_file));
    in_file = fopen(dev_fd_path, "r");
    if (!in_file) {
        perror("in_file is NULL");
        exit(1);
    }
    printf("%s", fgets(buffer, sizeof(buffer), in_file));

    return 0;
}

It writes some text to a file, deletes it, but keeps the file descriptor open and and then reopens it via a different route. Files aren’t actually deleted until the last process holding the last file descriptor closes it, and until then, you can get at the file contents via /proc.

Thanks to my old boss Anatoly for teaching me this trick when I deleted some important files that were fortunately still being appended to by another process!

More Related Contents:

  1. How to make child process die after parent exits?
  2. What is time_t ultimately a typedef to?
  3. How to calculate the CPU usage of a process by PID in Linux from C?
  4. What is the equivalent to Posix popen() in the Win32 API?
  5. How to recursively list directories in C on Linux?
  6. Why does this program print “forked!” 4 times?
  7. How does kernel get an executable binary file running under linux?
  8. How do I execute an external program within C code in Linux with arguments?
  9. Measure time in Linux – time vs clock vs getrusage vs clock_gettime vs gettimeofday vs timespec_get?
  10. stdout thread-safe in C on Linux?
  11. Creating a new directory in C
  12. POSIX API call to list all the pthreads running in a process
  13. Building a kernel module from several source files which one of them has the same name as the module
  14. Turn a simple socket into an SSL socket
  15. After forking, are global variables shared?
  16. How to check if a given file descriptor stored in a variable is still valid?
  17. how to call function in executable from my library?
  18. Problems with SO_BINDTODEVICE Linux socket option
  19. Is there a tool to know whether a value has an exact binary representation as a floating point variable?
  20. plain C: opening a directory with fopen()
  21. Reading and writing to serial port in C on Linux
  22. Why my kernel log is not showing the latest output?
  23. How do I pass a command line argument while starting up GDB in Linux? [duplicate]
  24. bind socket to network interface
  25. Process Linkage Table and Global Offset Table
  26. Writing a Linux int 80h system-call wrapper in GNU C inline assembly [duplicate]
  27. Linux: Why is sig_atomic_t typedef’ed to int?
  28. How to use lockdep feature in linux kernel for deadlock detection
  29. How to print exact value of the program counter in C
  30. How do I lock files using fopen()?

Leave a Comment