Creating a process without listing in ps -aux

[Patrick Asselman]

On 2013-05-13 21:17, Nils Kassube wrote:
> Prabhu wrote:
>> I would like to know how the process can be hijacked, means creating 
>> a
>> process without listing in ps -aux command.
>
> Sorry, I can't help you here. But I'm curious - for what use case
> (except a rootkit) would that feature be helpful?
>
>
> Nils

Not necessarily a rootkit, maybe just hiding your process from others, 
for (let's say) an april fools joke?

I don't know if it is possible to not list a process in ps -aux.
But you could of course change your process so that it exits or pauses 
as soon as a "ps" is started.

But whatever you come up with, there is never a guarantee that your 
process will not be found, because there are many other means of 
discovering processes ("top" or checking the /proc listing, to name but 
a few).

Best regards,
Patrick Asselman