find-escaped-procs.py

#!/usr/bin/python2.7 -u
from os.path import basename, join, dirname
from glob import glob
from pprint import pprint as pp

for proc in glob('/proc/*/status'):
    try:
        meta = dict(line.split(':\t', 1) for line in open(proc).read().splitlines())
    except IOError:
        continue
    if int(meta['PPid']) != 1:
        continue
    cgroup = open(join(dirname(proc), 'cgroup')).read().splitlines()
    cgroup = dict(line.split(':', 2)[1:] for line in cgroup)
    if cgroup['memory'] != '/':
        print('{}\t{}'.format(meta['Pid'], meta['Name']))