Creating a process without listing in ps -aux
Avi Greenbury
lists at avi.co
Tue May 14 23:27:03 UTC 2013
Prabhu wrote:
> I would like to know how the process can be hijacked, means creating a process
> without listing in ps -aux command.
Essentially, you'll need to modify the kernel. The 'usual' way is to
load a module which modifies how the kernel populates /proc/pid such
that when things (top, ps etc.) read that data they don't get the
entry relating to your hidden process.
--
Avi
More information about the ubuntu-users
mailing list