Re: [BLUG] spoofed process names?

I know that the mysql client (in the 3.x series) used to have a way of
removing the password argument from showing up in the process list. I
always wondered how they do that. I think I tried it again recently and
it doesn't do that anymore. Maybe something has changed in Linux that
prevents it now (which I think is the right thing to do).

It could be that the system you logged into itself has some kind of
process table viewing protection. There are some patches for Linux that
make it so that you can't view other user's processes. But that's
different from what you are asking about.

On Tue, Jul 10, 2007 at 11:55:52AM GMT, ben lipkowitz
[fenn@sdf.lonestar.org] said the following:
> recently i was poking around on a shared mainframe and saw that a user
> was running a rather interesting process:
>
> nullogic q8 - Mon06PM 11:57 Hey, I dont look at you...
>
> where normally it would look something like this: fenn rc -
> Mon07PM 0 (pine)
>
> any ideas on how this might have been accomplished? hint: sometimes i
> can get "w" to say "... (zsh)" at the end. this is a NetBSD system
> btw
>
> curiouser and curouser
>
> /\-/\
> >( o.o )<
> _____> <________fenn_____
> _______________________________________________ BLUG mailing list
> BLUG@linuxfan.com http://mailman.cs.indiana.edu/mailman/listinfo/blug
>

--
Mark Krenz
Bloomington Linux Users Group
http://www.bloomingtonlinux.org/
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug