[25500] in bugtraq
ps under FreeBSD
daemon@ATHENA.MIT.EDU (Jakub Filonik)
Sat May 18 15:38:13 2002
Date: Sat, 18 May 2002 20:40:38 +0200
From: Jakub Filonik <sirat@fremen.g0ds.org>
To: bugtraq@securityfocus.com
Message-ID: <20020518204038.A41695@fremen.dhs.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Hi,
I was playing with ps on FreeBSD with kern.ps_showallprocs=0 and I was
surprised when I have seen that I may see info about running process, if I
know it's ID
sirat@fremen:ttyp3:~> ps -u5710
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
seeba 5710 0,0 0,0 1388 0 p6 IWsJ - 0:00,00 -tcsh (tcsh)
I may see also root's processes:
sirat@fremen:ttyp3:~> ps -u205
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 205 0,0 0,1 2064 264 ?? IsJ 9:23 0:00,05 /usr/sbin/sshd
and ps axu gives:
sirat@fremen:ttyp3:~> ps axu
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
sirat 40384 0,0 0,1 428 272 p3 R+J 18:53 0:00,00 ps axu
root 515 0,0 0,3 1744 600 ?? SsJ 9:26 0:19,97 screen
sirat 516 0,0 0,0 1404 0 p2 IWsJ - 0:00,00 /bin/tcsh
sirat 519 0,0 0,9 3996 1672 p2 S+J 9:26 0:51,67
/usr/local/bin/irs
sirat 588 0,0 0,5 1396 860 p0 IsJ 9:32 0:00,83 -tcsh (tcsh)
sirat 1467 0,0 0,4 1400 844 p3 SsJ 9:37 0:00,52 -tcsh (tcsh)
sirat 2183 0,0 0,0 1400 0 p5 IWs+J - 0:00,00 -tcsh (tcsh)
sirat 4491 0,0 0,1 1604 124 p1 S+J 13:59 0:00,13 screen -r
sirat 40359 0,0 0,9 2676 1660 p0 I+J 18:51 0:00,07 mutt
sirat 40365 0,0 0,2 648 448 p0 I+J 18:51 0:00,01 sh -c joe '/home/s
sirat 40366 0,0 0,5 1316 900 p0 S+J 18:51 0:00,12 joe /home/sirat/tm
sirat 467 0,0 0,0 1396 0 p1 IWsJ - 0:00,00 -tcsh (tcsh)
I think it may be seen as bug. What do You think?
P.S. I have FreeBSD 4.6-PRERELEASE #0 and I checked it also on 4.5-STABLE
P.P.S. It works like that: ps -<argument><pid> and the argument isn't needed
--
## Jakub Filonik <sirat@is.one.of.fremen.g0ds.org>
## ADM: fremen.g0ds.org [213.25.59.48]
## PGP: http://fremen.g0ds.org/~sirat/sirat-pub.pgp
## CHAT: [ICQ: 35638062] [GG: 533719] [IRC: #Tabr]