Classically, tools like ps worked by opening &#x2F;dev&#x2F;kmem, reading the symbol list from &#x2F;vmunix or wherever, and chasing data structures in kernel memory a bit like a debugger might.<p>These days there is usually a getter for proctitle in the form of the &#x2F;proc filesystem, sysctls, etc.