Groups > linux.debian.user > #194963

Re: encryption

From	David Wright <deblis@lionunicorn.co.uk>
Newsgroups	linux.debian.user
Subject	Re: encryption
Date	2018-04-22 04:30 +0200
Message-ID	<vHcVj-6fo-1@gated-at.bofh.it> (permalink)
References	<vGK2Z-3Dx-1@gated-at.bofh.it> <vH3Il-8kQ-5@gated-at.bofh.it> <vH5h7-113-15@gated-at.bofh.it> <vH5TP-1fG-1@gated-at.bofh.it> <vH6db-1Ce-9@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Sat 21 Apr 2018 at 20:10:27 (+0100), Brian wrote:
> On Sat 21 Apr 2018 at 13:54:03 -0500, David Wright wrote:
> 
> > On Sat 21 Apr 2018 at 19:14:06 (+0100), Brian wrote:

> > > Is it possible that ps output does not show parameters to switches?
> > 
> > Not AFAIK. Here, I can see lines in the list such as:
> 
> Then I do not understand why paramters are not shown. Maybe they come
> later in the output? I can forsee a few sleepness nights trying to
> figure this out. :)
> 
> At this juncture it appears I should have no worries about ps revealing
> the secret.

As well as David C's mention of "ps -f" (which was news to me), I should
point out that I use "ps ax" as a matter of course, and "ps wwax" when
when interesting bits fall off the right margin; ie the BSD flavour of ps
gives this information by default.

> >  1247 ?    Ss 0:00 wpa_supplicant -B -i wlp2s0 -c /var/lib/wicd/configurations/44xxfcxxxxxx -Dwext
> >  1706 tty1 S  0:00 xterm -geometry 110x38+0+0 -fn neep-iso10646-1-18 -xrm *Page: 3 1
> > 
> > As you can see, I've mangled the MAC of my router that would be revealed otherwise.
> > 
> > And I wouldn't like to rely on winning a race with ps to avoid capture
> > of information exposed in my command lines.
> 
> I am not after winning any races but (seeing as you brought the issue
> up) knowing whether ps sees my secret and how to go about finding that
> out.

ps might not be the best tool for deliberately finding the info above.
The obvious place to look is /proc/<PID>/cmdline (where NULs separate
the items). One can imagine a scenario where one tries to keep up with
the PID incrementation and hoover up all the cmdlines on the system as
they fly by.

Cheers,
David.

Thread

encryption Brian <ad44@cityscape.co.uk> - 2018-04-20 21:40 +0200
  Re: encryption Greg Wooledge <wooledg@eeg.ccf.org> - 2018-04-20 22:00 +0200
  Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-21 02:10 +0200
    Re: encryption Brian <ad44@cityscape.co.uk> - 2018-04-21 17:30 +0200
      Re: encryption john doe <johndoe65534@mail.com> - 2018-04-21 17:40 +0200
        Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-21 22:00 +0200
          Re: encryption john doe <johndoe65534@mail.com> - 2018-04-22 08:30 +0200
            Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-22 20:30 +0200
      Re: encryption Glenn English <ghe2001@gmail.com> - 2018-04-21 19:00 +0200
        Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-21 22:30 +0200
      Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-21 21:50 +0200
        Re: encryption David Wright <deblis@lionunicorn.co.uk> - 2018-04-22 18:20 +0200
          Re: encryption Brian <ad44@cityscape.co.uk> - 2018-04-22 18:50 +0200
            Re: encryption David Wright <deblis@lionunicorn.co.uk> - 2018-04-23 10:50 +0200
              Re: encryption Brian <ad44@cityscape.co.uk> - 2018-04-23 13:20 +0200
                Re: encryption David Wright <deblis@lionunicorn.co.uk> - 2018-04-24 20:50 +0200
  Re: encryption David Wright <deblis@lionunicorn.co.uk> - 2018-04-21 18:40 +0200
    Re: encryption Brian <ad44@cityscape.co.uk> - 2018-04-21 20:20 +0200
      Re: encryption David Wright <deblis@lionunicorn.co.uk> - 2018-04-21 21:00 +0200
        Re: encryption Brian <ad44@cityscape.co.uk> - 2018-04-21 21:20 +0200
          Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-21 23:30 +0200
          Re: encryption David Wright <deblis@lionunicorn.co.uk> - 2018-04-22 04:30 +0200
            Re: encryption Curt <curty@free.fr> - 2018-04-22 11:20 +0200
              Re: encryption Reco <recoverym4n@gmail.com> - 2018-04-22 11:50 +0200
                Re: encryption Brian <ad44@cityscape.co.uk> - 2018-04-22 19:10 +0200
      Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-21 22:50 +0200
    Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-21 22:10 +0200
      Re: encryption David Wright <deblis@lionunicorn.co.uk> - 2018-04-22 04:00 +0200
        Re: encryption Brian <ad44@cityscape.co.uk> - 2018-04-22 17:40 +0200
          Re: encryption Richard Hector <richard@walnut.gen.nz> - 2018-04-23 08:00 +0200
            Re: encryption Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-04-23 09:00 +0200
        Re: encryption David Christensen <dpchrist@holgerdanske.com> - 2018-04-22 20:10 +0200

csiph-web