search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
47 stars 12 forks source link

Image Mounting Modification #345

Closed pjrinaldi closed 3 years ago

pjrinaldi commented 3 years ago

Image mounting modification using fuse functions should royally break for multiple forensic images since now they all mount to /tmp/wombatforensics/datamnt/

need to modify code to mount them to /tmp/wombatforensics/datamnt/e#/ or /tmp/wombatforensics/datamnt/forimgname/

and update code which looks there accordingly...

probably go with 2 since the forensic image name is readily available.

pjrinaldi commented 3 years ago

fuser names are also not be unique and will not unmount everything either, so this needs to be addressed as well with what to call them...

pjrinaldi commented 3 years ago

multiple .e01 weren't being mounted fully with my ewffuser function. i think this is fixed, need to test fully as well as figure out why a test image fails to parse properly.

pjrinaldi commented 3 years ago

need to store fuser variables in a list, and then loop over that list to unmount each fused filesystem in turn...

pjrinaldi commented 3 years ago

this fix is implemented. need to test multi e01's, aff's, and zmg's and see that it all unmounts and works correctly.

pjrinaldi commented 3 years ago

multiple fuselib calls to the same fusefs types overwrites itself. I need to figure out how to proerply implement the library calls fro fuse, but it is currently beyond me.

in the meantime, i have implemented the QProcess::execute() to call the respective fuse mount call: affuse, ewfmount, zmgmnt.

will have to fix this at some point later on, for now it's good enough to continue with the main program and take a break from fuse things.