root/vm: links for auto-forensic