Written by Ofloo on 05/30/07 13:38>>
Chuck Swiger-2 wrote:
Ofloo wrote:
Can someone explain me this !?
spark# ps aux | grep psybnc | grep s00p
s00p8777 0.0 0.3 43096 5716 p1- SFri06PM 4:30.25
./psybnc
spark# su s00p
-([EMAIL PROTECTED])-(19:56:45)
Ofloo wrote:
[ ... ]
No hacker would want to hide a process from a user it might want to hide a
process from root user.
Well, from all users-- agreed.
Also if the hacker was able to hide a process from a
user, it would of needed access to ps binary or freebsd source tree on that
system, havin
if the hacker was able to hide a process from a
user, it would of needed access to ps binary or freebsd source tree on that
system, having that access the hacker would of tried other things and not
hide a bnc from just a user account.
--
View this message in context:
http://www.nabble.com/PS-
t;> --
>> -Chuck
>>
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to
>> "[EMAIL PROTECTED]&quo
These:
> > s00p 67431 4.0 0.1 4660 2828 pd S 7:56PM 0:00.05 _su (tcsh)
> > s00p 67438 0.0 0.0 1420 908 pd R+7:56PM 0:00.00 ps aux
do not fit the criteria of the grep commands:
>> spark# ps aux | grep psybnc | grep s00p
which will only list entries containing psybnc and
Ofloo wrote:
Can someone explain me this !?
spark# ps aux | grep psybnc | grep s00p
s00p8777 0.0 0.3 43096 5716 p1- SFri06PM 4:30.25 ./psybnc
spark# su s00p
-([EMAIL PROTECTED])-(19:56:45)
-(~/)-> ps aux
USER PID %CPU %MEM VSZ
>
> Paul Fraser
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
>
This came after a complaint fr
7431 4.0 0.1 4660 2828 pd S 7:56PM 0:00.05 _su (tcsh)
s00p 67438 0.0 0.0 1420 908 pd R+7:56PM 0:00.00 ps aux
--
View this message in context:
http://www.nabble.com/PS-is-not-showing-all-processes-owned-by-a-user-tf3835565.html#a10859328
Sent from the freebsd-question
TT STAT STARTED TIME COMMAND
s00p 67431 4.0 0.1 4660 2828 pd S 7:56PM 0:00.05 _su (tcsh)
s00p 67438 0.0 0.0 1420 908 pd R+7:56PM 0:00.00 ps aux
--
View this message in context:
http://www.nabble.com/PS-is-not-showing-all-processes-owned-by-a-user-tf3835565.html#a10859
