🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #843

Re: Hiding Unix processes?

#843
From: Paul (Cliffy) Palmer
Date: Mon, 14 Dec 1992 20:51
30 lines
1854 bytes
>In article <1g42e5INNoac@darkstar.UCSC.EDU>, speth@cats.ucsc.edu (James Gustave) writes:
>
>   Is there a way to mask all of your running processes, similar to what the
> execl command can do for a single process?  I don't really like having
> everyone be able to see what I'm doing all the time.
>   I'm running SunOS Release 4.1.1, and I don't have root privs.

As a normal user, I have never run across a mechanism to do this in a
fool proof manner.

However, on hosts where it was necessary to segregate users, I have
removed the setuid bit from the ps (and pstat) programs, moved them
aside and placed wrappers in their place.  These setuid wrappers would
inspect their arguments and make sure they did not include any requests
to see other user's processes.  Valid requests were then processed by
invoking the original ps or pstat program.

This solution is simple, but less than ideal because some requests are
difficult to verify (requests for processes by process-id or
controlling terminal.)  The best solution was to modify the ps source
code to perform the appropriate checking.

In summary, if you have the assistance of your system administrator,
you have a couple of options.  If not, I would be interested in hearing
anything that you come up with.

----

Paul (Cliffy) Palmer
Technical Details
Message-ID: <1992Dec14.205108.15193@lambda.msfc.nasa.gov>
Path: arc1-ca.pugleaf.net!sparky!uunet!usc!elroy.jpl.nasa.gov!lambda.msfc.nasa.gov!news
References: <1992Dec14.182651.13894@cc.ic.ac.uk>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!usc!elroy.jpl.nasa.gov!lambda.msfc.nasa.gov!news
From: palmer@Trade_Zone.msfc.nasa.gov (Paul (Cliffy) Palmer)
Subject: Re: Hiding Unix processes?
Message-ID: <1992Dec14.205108.15193@lambda.msfc.nasa.gov>
Sender: news@lambda.msfc.nasa.gov (Newsmaster)
Nntp-Posting-Host: isabella.msfc.nasa.gov
Reply-To: palmer@Trade_Zone.msfc.nasa.gov
Organization: New Technology, Inc.
References: <1992Dec14.182651.13894@cc.ic.ac.uk>
Date: Mon, 14 Dec 1992 20:51:08 GMT
Lines: 31