Is there any possibility to authenticate a running process in Linux to be sure that this is the original/right one?
I know that an Linux operating system is only that secure like the way you use it. For Example: Lets say I'm using Ubuntu Linux and install any software via a PPA, that software get rights to do everything it want's in my system, because I have to install it with sudo rights. (PPA's are in general a security problem in Ubuntu I think)
Let us assume the "bad guy coded software" installs the things to do the work I expected, e.g a Gnome-Theme, a dynamic wallpaper whatever. But also it replaces any process of my Ubuntu system with a key-logger or any other kind of malware and runs in my system.
Is there any chance to check a running process in Linux if it is the original one?
The running processes are easy to get/find out and the processes of the OS and also the processes from a Ubuntu apt repository are known, so I guess there could be a possibility to compare the code of the running processes with any database of known Ubuntu repository software/processes and known Linux software/processes.
Is some kind of process authentication possible or available for Linux/Ubuntu?