On Sun, 21 Nov 2004 20:28:56 -0600 (CST), Mike Miller
<mbmiller at taxa.epi.umn.edu> wrote:
> I keep copies of ls and ps binaries on my system so that I can use them if
> I think I've been cracked.

The other nice thing about linux systems, is the /proc file system.  
You can do the work yourself if you dont trust ps:

jay at localhost$ cat /proc/1/cmdline && echo
init [2]

Of course, that means you have to trust /proc- I have not seen a root
kit that plays with /proc yet (dosnt mean they arnt out there)

Jay

-- 
Jay Kline
http://www.slushpupie.com/

_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list