emptymonkey / mimic

Hide processes as a normal user in Linux.
MIT License
254 stars 49 forks source link

Mimic breaks #3

Open q2dg opened 2 years ago

q2dg commented 2 years ago

After installing mimic via instructions shown in REAME, when I simply run /mimic -e "/usr/bin/bash" , after few seconds I get this error:

_/usr/sbin/apache2: start: File or directory doesn't exist !WIFSTOPPED() Error: libc register setup not detected. Aborting! mimic: ptrace(13, 1901, 0, 7ffd7e4caad0): No such process mimic: ptrace_dosyscall(16c5ca0, 11, 7f5862303000, 8, 0, 0, 0, 0): Operation not permitted mimic: ptrace(13, 1901, 0, 16c5cb0): No such process mimic: ptrace(17, 1901, 0, 0): No such process

I'm using Fedora 35, kernel 5.16.14-200 with SELinux in permissive mode.

Thanks!

PD: On the other hand, I've seen that before breaking, mimic itself is shown in ps -e/top, shouldn't it be hidden? Maybe this is worthy for another issue...