Simple process hiding kernel patch

I have updated the process hiding kernel patch described in my previous post. The following patch was created for a vanilla kernel from You should be able to patch also future kernel versions as it is a super simple single-line patch. Just modify one line in the proc_pid_instantiate method of fs/proc/base.c.

All menu configuration options have been stripped from this patch. This is the dimpliest way to accomplish process hiding in a modern Linux System. No need of further explanation.

current patch: prochide-simple-patch_2.6.27.10.diff

Leave a Comment