Skip to main content
14 events
when toggle format what by license comment
Mar 21, 2015 at 11:31 comment added goldilocks If someone asks "Which floor of the building is Cleveland on?", you do not say, "You can see it from the 11th floor." You say, "Cleveland is not that kind of thing". The only critical entities are the kernel and init. Everything else is arbitrary and optional. If that's a "non answer", I give up. Believe whatever.
Mar 21, 2015 at 11:27 comment added zuberuber @goldilocks Actually i like to think i gave practical answer, contrary to your non-answer.
Mar 21, 2015 at 11:25 comment added goldilocks ...unless every process is a "system" process, which does make sense -- but then it is a pointless qualifier.
Mar 21, 2015 at 11:22 comment added goldilocks Alright, fair enough. They do have PIDs, which is a bit confusing. All this is sort of tangential though, because there is no real answer to this question unless you define "system process". You've done it in two distinct, arbitrary ways: 1) That processes owned root are system processes. That is meaningless, and false. 2) That processes with a ppid of 0-2 are system processes. That is a bit more meaningful, but still pretty arbitrary since any process can end up with a ppid of 1. So you are promising the OP something that is not true.
Mar 21, 2015 at 11:16 comment added zuberuber @goldilocks I did not said threads are processes. I merely said they have ppid equal to 0.
Mar 21, 2015 at 11:13 comment added goldilocks Hence the title of the question, "Check if a process, is a system process". I understand that the OP doesn't understand and means this in an ambiguous way that could include kernel threads. However, you are not explaining things properly. If you want to refer to kernel threads, refer to kernel threads, but don't refer to them as processes, because this dilutes the more specific meaning of the word, which is important to understanding the system -- which is what the OP is trying to do.
Mar 21, 2015 at 11:11 comment added zuberuber @goldilocks It doesn't matter they're not processes. They show in ps and are present in /proc.
Mar 21, 2015 at 11:06 comment added goldilocks Kernel threads are not processes. A process is a userland entity.
Mar 21, 2015 at 11:02 comment added zuberuber @goldilocks Not only one process has ppid of 0. Kernel threads also have ppid of 0.
Mar 21, 2015 at 10:57 comment added goldilocks There is only one process with a ppid of 0, and that is init, because it is the only process without a parent. All other processes are descended from it and have a ppid >= 1.
Mar 21, 2015 at 10:54 comment added zuberuber @goldilocks Yes, there is no pid 0. But if PPid = 0 that means pid has no parent pid therefore it is system process. from ps -fe: root 1(pid) 0(ppid) .... /sbin/init
Mar 21, 2015 at 10:50 history edited zuberuber CC BY-SA 3.0
added 70 characters in body
Mar 21, 2015 at 10:45 comment added Milad.N Thanks, could you please indicate what each column means?
Mar 21, 2015 at 10:44 history answered zuberuber CC BY-SA 3.0