🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #327

Re: Hiding Processes from ps -ax

#327
From: Guenther Schreiner
Date: Thu, 10 Sep 1992 14:38
26 lines
1732 bytes
In article <GAY.92Sep10141255@moebius.loria.fr>, gay@moebius.loria.fr (Gay Stephane) writes:
|> >Alan J Rosenthal (flaps@dgp.toronto.edu) wrote:
|> >: sxjcb@orca.alaska.edu (Jay C. Beavers) writes:
|> >[...]
|> >This might be a simple way to do it,  if it worked!  On some systems
|> >it will do the trick (e.g. SunOS),  but it doesn't work on IBM's
|>                             ^^^^^
|> 
|> ok, name is changed. but you can have the real name using ps -axc.
|> still waiting for *the* solution. i've been told that you've to go
|> into /dev/kmem ...

Yes, just replace within the according PCB the PID of the process by a zero,
 and this process will be shown as swapper. But take care that you do NOT
 terminate that process ... a panic will soon come up.

:) Guenther

--
 Guenther Schreiner                     | University of Karlsruhe, Germany
  c/o Fakultaet fuer Informatik      ---+---
  Am Fasanengarten 5                    | Phone:    (+49) 721 608-3980
  7500 Karlsruhe 1                      | FAX:      (+49) 721 699284
                                        | INTERNET: guenther@ira.uka.de
 X.400: G=Guenther/S=Schreiner/OU=Informatik/PRMD=UNI-KARLSRUHE/ADMD=DBP/C=DE/;
--
Technical Details
Message-ID: <18nmkkINN11q@iraul1.ira.uka.de>
Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!yale.edu!ira.uka.de!uka!iras5!guenther
References: <1992Sep4.172142.4750@jarvis.csri.toronto.edu> <GAY.92Sep10141255@moebius.loria.fr>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!yale.edu!ira.uka.de!uka!iras5!guenther
From: guenther@iras5.ira.uka.de (Guenther Schreiner)
Newsgroups: comp.security.misc
Subject: Re: Hiding Processes from ps -ax
Date: 10 Sep 1992 14:38:12 GMT
Organization: University of Karlsruhe, FRG
Lines: 27
Distribution: world
Message-ID: <18nmkkINN11q@iraul1.ira.uka.de>
References: <1992Sep4.172142.4750@jarvis.csri.toronto.edu> <GAY.92Sep10141255@moebius.loria.fr>
NNTP-Posting-Host: iras5.ira.uka.de
Keywords: PCB, kernel