You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Answers.md
+14-23Lines changed: 14 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,39 +3,30 @@ layout: default
3
3
title: Answers
4
4
---
5
5
6
-
```
7
-
Output
8
-
. . .
9
-
10
-
-- Reboot --
11
-
12
-
. . .
13
-
```
14
-
15
6
# Chapter 1. Answers
16
7
1.**Answer**:
17
-
```
18
-
Hard link:
19
-
A hard link is an additional name for an existing file that points directly to the inode (data structure) on disk. It is indistinguishable from the original file. Deleting the original file does not affect the hard link.
8
+
```
9
+
Hard link:
10
+
A hard link is an additional name for an existing file that points directly to the inode (data structure) on disk. It is indistinguishable from the original file. Deleting the original file does not affect the hard link.
20
11
21
-
Symbolic (soft) link:
22
-
A symlink is a special file that contains a path to another file or directory. If the target is deleted, the symlink becomes broken (dangling).
12
+
Symbolic (soft) link:
13
+
A symlink is a special file that contains a path to another file or directory. If the target is deleted, the symlink becomes broken (dangling).
23
14
24
-
Forensically, symlinks can hide access paths or redirect programs; hard links can be used to obscure the presence or deletion of files.
25
-
```
15
+
Forensically, symlinks can hide access paths or redirect programs; hard links can be used to obscure the presence or deletion of files.
16
+
```
26
17
27
18
2. **Answer**:
28
-
```
29
-
Historically:
19
+
```
20
+
Historically:
30
21
31
-
/bin and /sbin contain essential system binaries required for early boot and maintenance.
22
+
/bin and /sbin contain essential system binaries required for early boot and maintenance.
32
23
33
-
/usr/bin and /usr/sbin contain user applications and non-essential system binaries.
24
+
/usr/bin and /usr/sbin contain user applications and non-essential system binaries.
34
25
35
-
Modern systems (especially on systemd-based distros) often symlink /bin to /usr/bin and /sbin to /usr/sbin as part of the merged /usr initiative.
26
+
Modern systems (especially on systemd-based distros) often symlink /bin to /usr/bin and /sbin to /usr/sbin as part of the merged /usr initiative.
36
27
37
-
Forensically, it’s important because tampered binaries or privilege escalation tools may hide in any of these paths.
38
-
```
28
+
Forensically, it’s important because tampered binaries or privilege escalation tools may hide in any of these paths.
0 commit comments