Path: utzoo!utgpu!news-server.csri.toronto.edu!rutgers!ucsd!swrinde!elroy.jpl.nasa.gov!mahendo!wlbr!voder!pyramid!ctnews!risky!pase70!scottl From: scottl@convergent.com (Scott Lurndal) Newsgroups: comp.unix.questions Subject: Re: command line shown by ps Message-ID: <3075@risky.Convergent.COM> Date: 21 Feb 91 19:28:27 GMT References: Sender: root@risky.Convergent.COM Reply-To: scottl@convergent.com (Scott Lurndal) Distribution: usa Organization: Unisys Network Computing Group Lines: 22 In article , jockc@hammer.idsila.com (PRIV Account) writes: |> How can a process change or obscure the command line that |> ps (and other programs like w or whodo) show for it? |> |> This could obviously be desirable for security reasons, but also for |> informational purposes. For example, when a program forks a child |> process to do something, the child proc might want to change |> its "command line" (what ps shows, which by now probably has little |> meaning) to something more descriptive of what its doing. |> |> I know this is going to vary depending on system type. I'm on |> DS3100 Ultrix, but I'd also like to know how its done on other common |> systems, or where that information would be found. |> |> Thanks for any insights. |> |> Jock Cooper |> uunet!hammer!jockc This data is kept in the u area for the process at exec(2) time. Most operating systems don't allow a program to write to the u area; therefore you cannot change it.