Path: utzoo!utgpu!news-server.csri.toronto.edu!rutgers!cs.utexas.edu!uunet!vtserf!creatures!csgrad!lavinus From: lavinus@csgrad.cs.vt.edu Newsgroups: comp.unix.questions Subject: Re: command line shown by ps Message-ID: <961@creatures.cs.vt.edu> Date: 22 Feb 91 19:00:03 GMT References: Sender: usenet@creatures.cs.vt.edu Reply-To: lavinus@csgrad.cs.vt.edu () Distribution: usa Organization: Virginia Tech Computer Science, Blacksburg, VA Lines: 16 Hi! In a C program, anyway, the way this is done is by modifying the argument vector (argv). This argument vector is what finger, w, etc. check to get the name of the process. FYI, the Internet Worm randomly changed its argument vector to various commonly-seen process names, and also occasionally forked off a copy of itself and killed off the parent, in order to change the process ID indicated by ps. So long... Joe Lavinus -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= = Joseph W. Lavinus = \ / = = Virginia Tech, Blacksburg, Virginia = \/__V = = email: lavinus@csgrad.cs.vt.edu = /\ =