Article View: comp.security.misc
Article #327Re: Hiding Processes from ps -ax
From: Guenther Schreiner
Date: Thu, 10 Sep 1992 14:38
Date: Thu, 10 Sep 1992 14:38
26 lines
1732 bytes
1732 bytes
In article <GAY.92Sep10141255@moebius.loria.fr>, gay@moebius.loria.fr (Gay Stephane) writes:
|> >Alan J Rosenthal (flaps@dgp.toronto.edu) wrote:
|> >: sxjcb@orca.alaska.edu (Jay C. Beavers) writes:
|> >[...]
|> >This might be a simple way to do it, if it worked! On some systems
|> >it will do the trick (e.g. SunOS), but it doesn't work on IBM's
|> ^^^^^
|>
|> ok, name is changed. but you can have the real name using ps -axc.
|> still waiting for *the* solution. i've been told that you've to go
|> into /dev/kmem ...
Yes, just replace within the according PCB the PID of the process by a zero,
and this process will be shown as swapper. But take care that you do NOT
terminate that process ... a panic will soon come up.
:) Guenther
--
Guenther Schreiner | University of Karlsruhe, Germany
c/o Fakultaet fuer Informatik ---+---
Am Fasanengarten 5 | Phone: (+49) 721 608-3980
7500 Karlsruhe 1 | FAX: (+49) 721 699284
| INTERNET: guenther@ira.uka.de
X.400: G=Guenther/S=Schreiner/OU=Informatik/PRMD=UNI-KARLSRUHE/ADMD=DBP/C=DE/;
--
Technical Details
Message-ID:
<18nmkkINN11q@iraul1.ira.uka.de>Path:
arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!yale.edu!ira.uka.de!uka!iras5!guentherReferences:
<1992Sep4.172142.4750@jarvis.csri.toronto.edu> <GAY.92Sep10141255@moebius.loria.fr>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!yale.edu!ira.uka.de!uka!iras5!guenther From: guenther@iras5.ira.uka.de (Guenther Schreiner) Newsgroups: comp.security.misc Subject: Re: Hiding Processes from ps -ax Date: 10 Sep 1992 14:38:12 GMT Organization: University of Karlsruhe, FRG Lines: 27 Distribution: world Message-ID: <18nmkkINN11q@iraul1.ira.uka.de> References: <1992Sep4.172142.4750@jarvis.csri.toronto.edu> <GAY.92Sep10141255@moebius.loria.fr> NNTP-Posting-Host: iras5.ira.uka.de Keywords: PCB, kernel