HOWTO hide a process.

Lukas Dobrek (dobrek@itp.uni-hannover.de)
Sun, 5 Aug 2001 14:09:42 +0200


--lrZ03NoBR/3+SXJZ
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,
I am very new in kernel stuff, so I dont know if it is a feature or
a some kind of bug, but using several line code one can somhow hide a
proces. The process is not visible for any known me ps tool.=20
If I lode the module:

struct task_struct * task;
task=3Dfind_task_by_pid(<pid>);
task->pid=3D0;

I can not see this task using ps, top, pstree but it is running.=20
I know that if one is able to load modules one can do a lot,
but I was just suprise that it is so simple.=20

Perhaps it will cause problems letter but now it works.=20

Best regards
Lukasz

--=20
=A3ukasz Dobrek
Institut f=FCr Theoretische Physik
Appelstra=DFe 2, 30167 Hannover, Germany
e-mail:dobrek@itp.uni-hannover.de

--lrZ03NoBR/3+SXJZ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7bTeEEMOMSYY3nYoRAuYtAJwK6HQqJE3gQlKNIzh3GM7alxlUYACfQz7p
plyP2AzoGRf3bCUnJbup8dQ=
=tG7H
-----END PGP SIGNATURE-----

--lrZ03NoBR/3+SXJZ--
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/