1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
|
.TH affuse "1" "Oct 2014" "AFFUSE 3.7.4" "provide access to AFF containers"
.\"Text automatically generated by txt2man
.SH NAME
\fBaffuse \fP- provide access to AFF containers
.SH SYNOPSIS
.nf
.fam C
\fBaffuse\fP [<FUSE \fIlibrary\fP options>] \fIaff_image\fP \fImount_point\fP
.fam T
.fi
.fam T
.fi
.SH DESCRIPTION
Provide access to AFF containers, allowing several advanced operations.
.PP
This file is part of the AFFLIBv3, that provides AFF.
.PP
AFF is an open and extensible file format to store disk images and associated
metadata. It is useful in several scenaries, as computer forensics
investigations.
.SH OPTIONS
FUSE options:
.RS
.TP
.B
\fB-d\fP \fB-o\fP debug
Enable debug output (implies in \fB-f\fP).
.TP
.B
\fB-f\fP
Foreground operation.
.TP
.B
\fB-s\fP
Disable multi-threaded operation.
.TP
.B
\fB-o\fP allow_other
Allow access to other users.
.TP
.B
\fB-o\fP allow_root
Allow access to root.
.TP
.B
\fB-o\fP auto_unmount
Auto unmount on process termination.
.TP
.B
\fB-o\fP nonempty
Allow mounts over non-empty file/dir.
.TP
.B
\fB-o\fP default_permissions
Enable permission checking by kernel.
.TP
.B
\fB-o\fP fsname=NAME
Set filesystem name.
.TP
.B
\fB-o\fP subtype=NAME
Set filesystem type.
.TP
.B
\fB-o\fP large_read
Issue large read requests (2.4 only).
.TP
.B
\fB-o\fP max_read=N
Set maximum size of read requests.
.TP
.B
\fB-o\fP hard_remove
Immediate removal (don't hide files).
.TP
.B
\fB-o\fP use_ino
Let filesystem set inode numbers.
.TP
.B
\fB-o\fP readdir_ino
Try to fill in d_ino in readdir.
.TP
.B
\fB-o\fP direct_io
Use direct I/O.
.TP
.B
\fB-o\fP kernel_cache
Cache files in kernel.
.TP
.B
\fB-o\fP [no]auto_cache
Enable caching based on modification times (off).
.TP
.B
\fB-o\fP umask=M
Set file permissions (octal).
.TP
.B
\fB-o\fP uid=N
Sset file owner.
.TP
.B
\fB-o\fP gid=N
Set file group.
.TP
.B
\fB-o\fP entry_timeout=T
Cache timeout for names (1.0s).
.TP
.B
\fB-o\fP negative_timeout=T
Cache timeout for deleted names (0.0s).
.TP
.B
\fB-o\fP attr_timeout=T
Cache timeout for attributes (1.0s).
.TP
.B
\fB-o\fP ac_attr_timeout=T
Auto cache timeout for attributes (attr_timeout).
.TP
.B
\fB-o\fP noforget
Never forget cached inodes.
.TP
.B
\fB-o\fP remember=T
Remember cached inodes for T seconds (0s).
.TP
.B
\fB-o\fP nopath
Don't supply path if not necessary.
.TP
.B
\fB-o\fP intr
Allow requests to be interrupted.
.TP
.B
\fB-o\fP intr_signal=NUM
Signal to send on interrupt (10).
.TP
.B
\fB-o\fP modules=M1[:M2\.\.\.]
Names of modules to push onto filesystem stack.
.TP
.B
\fB-o\fP max_write=N
Set maximum size of write requests.
.TP
.B
\fB-o\fP max_readahead=N
Set maximum readahead.
.TP
.B
\fB-o\fP max_background=N
Set number of maximum background requests.
.TP
.B
\fB-o\fP congestion_threshold=N
Set kernel's congestion threshold.
.TP
.B
\fB-o\fP async_read
Perform reads asynchronously (default).
.TP
.B
\fB-o\fP sync_read
Perform reads synchronously.
.TP
.B
\fB-o\fP atomic_o_trunc
Enable atomic open+truncate support.
.TP
.B
\fB-o\fP big_writes
Enable larger than 4kB writes.
.TP
.B
\fB-o\fP no_remote_lock
Disable remote file locking.
.TP
.B
\fB-o\fP no_remote_flock
Disable remote file locking (BSD).
.TP
.B
\fB-o\fP no_remote_posix_lock
Disable remove file locking (POSIX).
.TP
.B
\fB-o\fP [no_]splice_write
Use splice to write to the fuse device.
.TP
.B
\fB-o\fP [no_]splice_move
Move data while splicing to the fuse device.
.TP
.B
\fB-o\fP [no_]splice_read
Use splice to read from the fuse device.
.RE
.PP
Module options:
.PP
[iconv]
.RS
.TP
.B
\fB-o\fP from_code=CHARSET
Original encoding of file names (default: UTF-8).
.TP
.B
\fB-o\fP to_code=CHARSET
New encoding of the file names (default: UTF-8).
.RE
.PP
[subdir]
.RS
.TP
.B
\fB-o\fP subdir=DIR
Prepend this directory to all paths (mandatory).
.TP
.B
\fB-o\fP [no]rellinks
Transform absolute symlinks to relative.
.SH NOTES
Use fusermount3 \fB-u\fP \fImount_point\fP, to unmount.
.SH SEE ALSO
\fBaffcat\fP(1), \fBaffcompare\fP(1), \fBaffconvert\fP(1), \fBaffcopy\fP(1), \fBaffcrypto\fP(1),
\fBaffdiskprint\fP(1), \fBaffinfo\fP(1), \fBaffix\fP(1), \fBaffrecover\fP(1), \fBaffsegment\fP(1),
\fBaffsign\fP(1), \fBaffstats\fP(1), \fBaffverify\fP(1), \fBaffxml\fP(1)
.SH AUTHOR
The AFFLIB was written by Simson L. Garfinkel <simsong@acm.org> and Basis
Technology, Inc.
.PP
This manual page was written by Joao Eriberto Mota Filho <eriberto@debian.org>
for the Debian project (but may be used by others).
|
