Is it possible to hide process args from 'ps -ef'?? (Recap)
Brandon S. Allbery KB8JRR/AA
allbery at NCoast.ORG
Tue Apr 23 10:24:21 AEST 1991
As quoted from <1991Apr21.225044.883 at servalan.uucp> by rmtodd at servalan.uucp (Richard Todd):
+---------------
| I must admit to not having great experience with "unadulterated" SysV, but
| on two SysV-derived systems I've used (A/UX and ISC Unix), ps by default
| only looks at the program name in the U area, but with the "f" flag will
| go ahead and find the program's stack and read the arg. list. Also, by
+---------------
A/UX is SVR2 internally; it reads argv[] out of the program's stack. ISC ---
which version? Try "grep u_psargs /usr/include/sys/user.h" and see if it
finds anything --- if it does, then you have a SVR3.[12] which copies the
first part of argv[] into the ublock.
++Brandon
--
Me: Brandon S. Allbery Ham: KB8JRR/AA on 10m,2m,220,440,1.2
Internet: allbery at NCoast.ORG (restricted HF at present)
Delphi: ALLBERY AMPR: kb8jrr.AmPR.ORG [44.70.4.88]
uunet!usenet.ins.cwru.edu!ncoast!allbery KB8JRR @ WA8BXN.OH
More information about the Comp.unix.wizards
mailing list