| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <Pine.LNX.4.61.0612141809300.12730@yvahk01.tjqt.qr> Date: Thu, 14 Dec 2006 18:11:18 +0100 (MET) From: Jan Engelhardt <jengelh@...ux01.gwdg.de> To: Daniel Forrest <forrest@...g.wisc.edu> cc: linux-kernel@...r.kernel.org Subject: Re: Processes with hidden PID files in /proc >Yesterday I discovered some processes that had a PPID which was not >shown as a running process by "ps". Also an "ls /proc" did not show >that PPID. > >I've Googled on this enough to find out that these are Linux threads, >that "ps -m" will show them, that "ls -a /proc" will show /proc/.PPID, >etc, but I'm still wondering what exact sequence of system calls will >create a process like this? It's all there: 18:10 ichi:/proc/3689 # l exe lrwxrwxrwx 1 root root 0 Dec 14 08:02 exe -> /usr/sbin/named 18:10 ichi:/proc/3689 # l task total 0 dr-xr-xr-x 6 named named 0 Dec 14 18:09 . dr-xr-xr-x 5 named named 0 Dec 14 08:02 .. dr-xr-xr-x 4 named named 0 Dec 14 18:09 3689 dr-xr-xr-x 4 named named 0 Dec 14 18:09 3690 dr-xr-xr-x 4 named named 0 Dec 14 18:09 3691 dr-xr-xr-x 4 named named 0 Dec 14 18:09 3692 18:10 ichi:/proc/3689 # l -d ../3692 dr-xr-xr-x 5 named named 0 Dec 14 18:09 ../3692 18:10 ichi:/proc/3689 # l .. | grep 3692 W.W.W.W.W. Only "processes" are returned by readdir() on /proc, but every "thread" (LWP) is still accessible. -`J' -- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists