The process executable path maybe wrong?

[sechacking]

hi,all
in my host,has one process like this

root 1422 1 0 2014 ? 02:39:45 /usr/bin/ruby /usr/sbin/puppetd

that maybe my progame is puppetd,but i use psutil.Process to get process exe path

they say exe is /usr/bin/ruby...

so someone has konw how fix it?

[giampaolo]

psutil is correct because the executable is the ruby interpreter, not puppetd. /usr/sbin/puppetd is part of the cmdline the process it was called with, which you can extract (and possibly parse) with Process.cmdline().