Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  b=01Xxv8RnVdWhZK90Po9j1/P9GkaC3q/t9QqAXhvxY7xcb6rWOuHlCjfVZ5WOdksR/LZYubzVwx9GBknNLHtOxeOENe7xPh44H/xnW/Qsh6fhssEoPZ28qG6UWR4ExyTZl2UzNWwBwYGqaLAF4VP3dTkY5BrAiZEpXVLwXtRNwYg=  ;
Message-ID: <20041128233747.53950.qmail@web51902.mail.yahoo.com>
Date: Sun, 28 Nov 2004 15:37:47 -0800 (PST)
From: A M <alim1993@yahoo.com>
Subject: Re: Accessing a process structure in the processes link list
To: Doug McNaught <doug@mcnaught.org>
Cc: linux-kernel@vger.kernel.org
In-Reply-To: <874qj9lg7t.fsf@asmodeus.mcnaught.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 1351
Lines: 55

How would you know the offset (location of index 0 if
it was an array or the head of link list) of that
variable in memory, in this case it is the process
table named task of type a pointer to task_struct? 

Any recommendation for references will be appreciated.


Thanks, 

Ali 

--- Doug McNaught <doug@mcnaught.org> wrote:

> A M <alim1993@yahoo.com> writes:
> 
> > Would it be possible for a program running as root
> > that wasn't compiled with the kernel to access a
> > process structure in the processes link list? 
> 
> Yes, but see below.
> 
> > I've read an article about hiding processes and
> the
> > article made sound so easy to access the link list
> and
> > hide a process, how easy is it?
> 
> You need read access to /dev/kmem and a fairly
> intimate knowledge of
> the kernel data structures in question.
>  
> > Is it possible to a process to access its own
> entry in
> > the processes link list?
> 
> Not without read access to the kmem device...
> 
> -Doug
> 


__________________________________ 
Do you Yahoo!? 
The all-new My Yahoo! - Get yours free! 
http://my.yahoo.com 
 

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/