From owner-freebsd-stable@FreeBSD.ORG Thu Jun 8 01:59:25 2006 Return-Path: X-Original-To: freebsd-stable@FreeBSD.ORG Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 66B1B1701BE for ; Wed, 7 Jun 2006 23:47:56 +0000 (UTC) (envelope-from dds@aueb.gr) Received: from mx-out-04.forthnet.gr (mx-out.forthnet.gr [193.92.150.103]) by mx1.FreeBSD.org (Postfix) with ESMTP id B0F6F43D6A for ; Wed, 7 Jun 2006 23:47:36 +0000 (GMT) (envelope-from dds@aueb.gr) Received: from mx-av-03.forthnet.gr (mx-av.forthnet.gr [193.92.150.27]) by mx-out-04.forthnet.gr (8.13.6/8.13.6) with ESMTP id k57NlWtj009905; Thu, 8 Jun 2006 02:47:32 +0300 Received: from mx-in-03.forthnet.gr (mx-in-03.forthnet.gr [193.92.150.26]) by mx-av-03.forthnet.gr (8.13.6/8.13.6) with ESMTP id k57NlWVg001679; Thu, 8 Jun 2006 02:47:32 +0300 Received: from [192.168.136.16] (ppp93-9.adsl.forthnet.gr [194.219.141.9]) by mx-in-03.forthnet.gr (8.13.6/8.13.6) with ESMTP id k57NlUgU005180; Thu, 8 Jun 2006 02:47:31 +0300 Authentication-Results: mx-in-03.forthnet.gr from=dds@aueb.gr; sender-id=neutral; spf=neutral Message-ID: <4487659E.8000303@aueb.gr> Date: Thu, 08 Jun 2006 02:47:42 +0300 From: Diomidis Spinellis User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060516 SeaMonkey/1.0.2 MIME-Version: 1.0 To: Tofik Suleymanov References: <4486A111.6020300@oxygen.az> <4486EFC8.6080601@oxygen.az> In-Reply-To: <4486EFC8.6080601@oxygen.az> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-stable@FreeBSD.ORG, James Riendeau Subject: Re: reading process memory X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Jun 2006 01:59:44 -0000 Tofik Suleymanov wrote: >> The only way you're going to be able to read another processes >> address space is in the kernel.Even a process running as root is not >> able to read another process's data. Incorrect; see this example: $ sed -e 's/this/that/' & [1] 87345 $ /bin/su Password: # dd if=/proc/87345/mem conv=noerror 2> /dev/null | strings [...] @(#)compile.c 8.1 (Berkeley) 6/6/93 [...] RE error: %s RuneMagiNONE /this/that/ "s/this/that/ s/this/that/ this that that Diomidis - http://www.spinellis.gr