Patrick G.

Segfault when running elevated unhide -m -d sys procall brute reverse

Hi, Thanks for the report. I'm using unhide mainly via CLI in an elevated shell (su). I recently made an extensive test of all unhide subcommands without encountering any problems. I tried the same command you used "unhide -m -d sys procall brute reverse" several times but I was unable to reproduce the crash. Note that Rkhunter also runs as root and spawns a rooted unhide. Even thougth your two crashes don't happened in the same test, the backtraces are exactly the same. Strange but without debug...

Hi Hoot, Thanks for reporting. I also discovered two weeks ago that ss has changed its output (unneeded spaces added at end of lines). It's maybe due to the commit you indicate, as the process header is added even if not asked to. It could be that all the process column is added. It's already corrected in my own version. I will try to make a new version of unhide in the coming weeks but no promise :) In the meantime, if you're not afraid by builds :), you can replace the routine checkoneport() in...

Patch to whitelist processes for ''System V Shared Memory test"