Accessing a process structure in the processes link list

Accessing a process structure in the processes link list

[A M]

Would it be possible for a program running as root
that wasn't compiled with the kernel to access a
process structure in the processes link list? 

I've read an article about hiding processes and the
article made sound so easy to access the link list and
hide a process, how easy is it? 

Is it possible to a process to access its own entry in
the processes link list?


Thanks, 

Ali 




		
__________________________________ 
Do you Yahoo!? 
Meet the all-new My Yahoo! - Try it today! 
http://my.yahoo.com 
 

Re: Accessing a process structure in the processes link list

[simon]

A M wrote:
> Would it be possible for a program running as root
> that wasn't compiled with the kernel to access a
> process structure in the processes link list? 
> 
> I've read an article about hiding processes and the
> article made sound so easy to access the link list and
> hide a process, how easy is it? 
there is some way... in kernel mode...
for example you can write a module who redirect the getdents system 
call... it is used to get directory listing...
command like ps are just a listing of the /proc/"pid" directories...
if you intercept a getdents call for a directory matching the pid of the 
process you want hide... just forget...
> 
> Is it possible to a process to access its own entry in
> the processes link list?
yes a process can change some attributes in his own entry... but i don't 
think it can acces to the process link list or hide itself in userspace...

simon