Jeff Layton wrote: Yep, although the change is not upstream in Linus's tree, Roland's linux-2.6-utrace.patch removes it in Fedora: @@ -1070,18 +1063,26 @@ struct task_struct { /* * pointers to (original) parent process, youngest child, younger sibling, * older sibling, respectively. (p->father can be replaced with - * p->parent->pid) + * p->real_parent->pid) */ - struct task_struct *real_parent; /* real parent process (when being debugged) */ - struct task_struct *parent; /* parent process */ + struct task_struct *real_parent; /* real parent process */ /* - * children/sibling forms the list of my children plus the - * tasks I'm ptracing. + * children/sibling forms the list of my natural children */ AFAICT, task_struct.real_parent can be substituted. Try the attached patch. (and then wait to see what else has been broken...) Dave --- task.c.orig 2008-04-04 09:48:38.000000000 -0400 +++ task.c 2008-04-04 09:50:13.000000000 -0400 @@ -208,6 +208,9 @@ MEMBER_OFFSET_INIT(task_struct_processor, "task_struct", "processor"); MEMBER_OFFSET_INIT(task_struct_p_pptr, "task_struct", "p_pptr"); MEMBER_OFFSET_INIT(task_struct_parent, "task_struct", "parent"); + if (INVALID_MEMBER(task_struct_parent)) + MEMBER_OFFSET_INIT(task_struct_parent, "task_struct", + "real_parent"); MEMBER_OFFSET_INIT(task_struct_has_cpu, "task_struct", "has_cpu"); MEMBER_OFFSET_INIT(task_struct_cpus_runnable, "task_struct", "cpus_runnable");