diff --git a/README.md b/README.md index 227a476..6edd3a3 100644 --- a/README.md +++ b/README.md @@ -1792,12 +1792,15 @@ Note: Or delete the file and then fill the entire harddrive with /dev/urandom an **8.ii. Restore the date of a file** -Let's say you have modified */etc/passwd* but the file date now shows that */etc/passwd* has been modified. Use *touch* to change the file data to the date of another file (in this example, */etc/shadow*) +Let's say you have modified */etc/passwd* but the file date now shows that */etc/passwd* has been modified. Use *touch* to change the file date to the date of another file (in this example, */etc/shadow*) ```sh touch -r /etc/shadow /etc/passwd +# verify with 'stat /etc/passwd' ``` +Use [hackshell](#hackshell) and `notime` to also adjust the ctime and birth-time of a file. + **8.iii. Clear logfile**