Chat with us, powered by LiveChat
Security Tip: Finding working directory of Process

Security Tip: Finding working directory of Process

Find PID of process
$ps aux | grep
Find out current working directory of the process 1213
$pwdx 1213 >> Output : 1213: /tmp/.abc

This seems to be someone try to hide process directory. You can then try to find out using..
$ls -l /proc/1213/cwd

Output :
lrwxrwxrwx 1 root root 0 Nov 20 04:35 /proc/1213/cwd -> /var/spool/mqueue

Sharing

Leave your comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.