That's the point. As long as the file is open, it's pointed to by some
/proc entry, and you would be able to read its contents from user space,
but not reconstruct its physical structure - so undelete would create
another file _with the same contents_, not at the same place.
--
Steffen Grunewald | email steffen@gfz-potsdam.de | fax (+49)-331-8877 520
GeoForschungsZentrum Potsdam, Telegrafenberg A17, D-14473 Potsdam, Germany
http://www.gfz-potsdam.de/
/* Disclaimer : I don't speak for my employers, they don't speak for me */