OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Dustin Trammell (DTrammellPENSON.COM)
Date: Thu Apr 11 2002 - 12:50:54 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    The last time I used LIDS (www.lids.org), it had functionality to hide
    processes that you are able to define the full path to, and optionally their
    child processes. I have not used LIDS in over a year and a half, so I'm not
    sure if it still contains that functionality, and obviously it is for the
    Linux kernel only. If your server is Linux, and LIDS still supports hiding
    processes, this may be a solution for you.

    Hope this helped, 

    ---
Dustin D. Trammell
Information Security Specialist
Penson Financial Services, Inc.

    -----Original Message-----
From: Thiago Mello [mailto:indiounderprotection.com.br]
Sent: Wednesday, April 10, 2002 8:58 AM
To: honeypotssecurityfocus.com
Subject: Hiding a process

    Hi,

    Im building a honeynet, and Im usign Modules Syslog,
but its daemon shows up in the process list (ps).
IŽd like to hide this process, anyone could
give any information?

    Tnx

    Thiago Mello

    ---------------------------------------------------------------------
To unsubscribe, e-mail: honeypots-unsubscribesecurityfocus.com
For additional commands, e-mail: honeypots-helpsecurityfocus.com
---------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert
(SIA) Service. For more information on SecurityFocus' SIA service
which automatically alerts you to the latest security vulnerabilities. 
Please, see: https://alerts.securityfocus.com/