If you have root you can just reboot or kexec and embed yourself at kernel level. The trick is to hide in plain sight. Call your process “tracker-miner-fs” (co

If you have root you can just reboot or kexec and embed yourself at kernel level. The trick is to hide in plain sight. Call your process “tracker-miner-fs” (common suspiciously named GNOME process”). When the system administrator sees your process eating up huge amount of CPU time and does a web search, they’ll come to the conclusion it’s just GNOME being GNOME.