Figure 10.7 Behavior of /bin/login before
(background) and after (foreground) installation of
Linux RootKit “lrk5”