Messages in this thread | | | Date | Tue, 05 Oct 2004 22:59:24 +0200 | From | Patryk Jakubowski <> | Subject | Invisible threads in 2.6.9 |
| |
Hi.
I've been experimenting with process/thread accounting in 2.6.9-rc3 (and 2.6.8), and found this strange situation: if the leader thread of a multi-threaded process terminates, the other threads become undetectable. After the main thread becomes a zombie, /proc/PID/task returns ENOENT on open. If you happen to know the TID, you can access /proc/PID/* directly, but otherwise, there is no way to observe the remaining threads, as far as I can see. Consider this program, for example:
| #include
void *run(void *arg) { for(;;) ; }
int main() { pthread_t t; int i; for (i = 0; i < 10; ++i) pthread_create(&t, NULL, run, NULL); pthread_exit(NULL); } |
When I run it, the system (predictably) goes to ~100% CPU utilization, but there seems to be no way to find out who is hogging the CPU with top(1), ps(1), or anything else. All they can show is the main thread in zombie state, consuming 0% CPU.
Is this correct behaviour of linux? Would not this allow user space programs to hide running executions? This could be an opportunity for spyware to infect the machine and hide itself perhaps? Hope I'm wrong here!
If this is the bug in kernel (procfs?) I can give you my configuration and resulting behaviour.
Sorry for my bad english.
---------------------------------------------------------------------- Portal INTERIA.PL zaprasza... >>> http://link.interia.pl/f17cb
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |