Date: Thu, 08 Jun 2006 02:47:42 +0300 From: Diomidis Spinellis <dds@aueb.gr> To: Tofik Suleymanov <tofik@oxygen.az> Cc: freebsd-stable@FreeBSD.ORG, James Riendeau <jtriende@wisc.edu> Subject: Re: reading process memory Message-ID: <4487659E.8000303@aueb.gr> In-Reply-To: <4486EFC8.6080601@oxygen.az> References: <4486A111.6020300@oxygen.az> <ED5EC8BD-0A92-4D73-BC01-48FD930311FF@wisc.edu> <4486EFC8.6080601@oxygen.az>
next in thread | previous in thread | raw e-mail | index | archive | help
Tofik Suleymanov wrote: >> The only way you're going to be able to read another processes >> address space is in the kernel.Even a process running as root is not >> able to read another process's data. Incorrect; see this example: $ sed -e 's/this/that/' & [1] 87345 $ /bin/su Password: # dd if=/proc/87345/mem conv=noerror 2> /dev/null | strings [...] @(#)compile.c 8.1 (Berkeley) 6/6/93 [...] RE error: %s RuneMagiNONE /this/that/ "s/this/that/ s/this/that/ this that that Diomidis - http://www.spinellis.gr
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4487659E.8000303>