Received: from mail.utexas.edu (wb3-a.mail.utexas.edu [128.83.126.138]) by hub.org (8.9.1/8.9.1) with SMTP id MAA13980 for ; Thu, 29 Oct 1998 12:07:41 -0500 (EST) (envelope-from taral@mail.utexas.edu) Received: (qmail 3834 invoked by uid 0); 29 Oct 1998 17:05:40 -0000 Received: from dial-35-6.ots.utexas.edu (HELO taral) (128.83.111.102) by umbs-smtp-3 with SMTP; 29 Oct 1998 17:05:40 -0000 From: "Taral" To: "Bruce Momjian" , Cc: , , , Subject: RE: [HACKERS] Open 6.4 items Date: Thu, 29 Oct 1998 11:05:38 -0600 Message-ID: <000201be035e$5a417140$3b291f0a@taral> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 Importance: Normal In-Reply-To: <199810290707.CAA12034@candle.pha.pa.us> X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0 > Wow, that really is strange. Seems like with the -f, it looks in one > place, as though it knows the child did not exec, so they params must be > the same, while with no -f, it looks in the proper area. The really > weird thing is that even the postmaster is called postgres. That is > bizarre. Yes. With -f, it looks in the process's argv... without, it looks in the task struct where only the executable name was stored (no path or anything else). It's a feature to prevent processes that spoof as something else... (not very effective, IMHO) Taral