A quick&dirty solution would be to check a binary against a regex, and if it matches, parse /proc/$PID/cmdline and get the second element. I don't know if there are tools that parse the output of "zypper ps", but I can't think of breakage that this change could cause. I also don't think there are security implications of doing this (the change would effectively hide the interpreter).