Creating a process without listing in ps -aux

Avi Greenbury lists at avi.co
Tue May 14 23:27:03 UTC 2013


Prabhu wrote:
> I would like to know how the process can be hijacked, means creating a process
> without listing in ps -aux command. 

Essentially, you'll need to modify the kernel. The 'usual' way is to
load a module which modifies how the kernel populates /proc/pid such
that when things (top, ps etc.) read that data they don't get the
entry relating to your hidden process.

-- 
Avi




More information about the ubuntu-users mailing list