🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #323

Re: Hiding Processes from ps -ax

#323
From: Gay Stephane
Date: Thu, 10 Sep 1992 12:12
17 lines
1385 bytes
>Alan J Rosenthal (flaps@dgp.toronto.edu) wrote:
>: sxjcb@orca.alaska.edu (Jay C. Beavers) writes:
>: >I've recently heard that you can hide a process from being displayed by a
>: >ps -ax command.  Is this true, and if so what security implications does it
>: >have?  How is this done,

>This might be a simple way to do it,  if it worked!  On some systems
>it will do the trick (e.g. SunOS),  but it doesn't work on IBM's
                            ^^^^^

ok, name is changed. but you can have the real name using ps -axc.
still waiting for *the* solution. i've been told that you've to go
into /dev/kmem ...
--
---------------------------------------------------------------------------
 Stephane GAY, Metz, FRANCE.        please e.mail to : bigorno@ese-metz.fr
---------------------------------------------------------------------------
Technical Details
Message-ID: <GAY.92Sep10141255@moebius.loria.fr>
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!corton!loria!news.loria.fr!gay
References: <1992Sep4.172142.4750@jarvis.csri.toronto.edu> <3078@ariel.its.unimelb.EDU.AU>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!corton!loria!news.loria.fr!gay
From: gay@moebius.loria.fr (Gay Stephane)
Newsgroups: comp.security.misc
Subject: Re: Hiding Processes from ps -ax
Message-ID: <GAY.92Sep10141255@moebius.loria.fr>
Date: 10 Sep 92 12:12:55 GMT
References: <1992Sep4.172142.4750@jarvis.csri.toronto.edu>
 <3078@ariel.its.unimelb.EDU.AU>
Sender: news@news.loria.fr
Organization: INRIA-Lorraine / CRIN - Nancy - France
Lines: 17
In-reply-to: dfa@rabbit.physiol.unimelb.edu.au's message of 5 Sep 92 06:17:40 GMT