[plug] Untraceable Process. Sys-Op Challenge

Andrew Furey andrew.furey at gmail.com
Tue Feb 8 15:11:18 WST 2005


> I was about to ask whether this is doable with a child perl script
> without the /usr/bin/perl binary supporting it, but then I realised
> that it doesn't actually need to be a perl script at all. If this is
> the way he's doing it, you can't trust anything in the /proc output -
> odds are it's a compiled C program somewhere in his home directory.

Just another thought I had... what's the output of "lsof | grep
[pid]"? Mind you, it might be fakeable too...

Andrew

-- 
Linux supports the notion of a command line or a shell for the same
reason that only children read books with only pictures in them.
Language, be it English or something else, is the only tool flexible
enough to accomplish a sufficiently broad range of tasks.
                          -- Bill Garrett



More information about the plug mailing list