System/Kernel


waldo@admirer:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=4be0cc32aba02ec4e0f010047be5ae9dee756960, stripped
Linux admirer 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64 GNU/Linux
PRETTY_NAME="Devuan GNU/Linux ascii"
NAME="Devuan GNU/Linux"
ID=devuan
ID_LIKE=debian
home_url="https://www.devuan.org/"
support_url="https://devuan.org/os/community"
bug_report_url="https://bugs.devuan.org/"

4.9.0-19-amd64 Devuan GNU/Linux ascii x86_64

Networks


waldo@admirer:~$ netstat -antup4
(No info could be read for "-p": geteuid()=1000 but you should be root.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      -                   
tcp        0    304 10.10.10.187:22         10.10.16.8:42040        ESTABLISHED -                   

127.0.0.1:3306 127.0.0.1:25

Users & Groups


waldo@admirer:~$ cat /etc/passwd ; ls -lasht /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
_apt:x:100:65534::/nonexistent:/bin/false
debian-exim:x:101:104::/var/spool/exim4:/bin/false
avahi-autoipd:x:102:105:Avahi autoip daemon,,,:/var/lib/avahi-autoipd:/bin/false
messagebus:x:103:106::/var/run/dbus:/bin/false
sshd:x:104:65534::/run/sshd:/usr/sbin/nologin
waldo:x:1000:1000:Waldo Cooper:/home/waldo:/bin/bash
mysql:x:105:110:MySQL Server,,,:/nonexistent:/bin/false
ftp:x:106:111:ftp daemon,,,:/srv/ftp:/bin/false
ftpuser:x:1001:1002::/srv/ftp:/bin/false
penny:x:1002:1005:Penny Wise:/home/penny:/bin/bash
rajesh:x:1003:1006:Rajesh Nayyar:/home/rajesh:/bin/bash
amy:x:1004:1007:Amy Bialik:/home/amy:/bin/bash
leonard:x:1005:1008:Leonard Galecki:/home/leonard:/bin/bash
bernadette:x:1007:1010:Bernadette Rauch:/home/bernadette:/bin/bash
howard:x:1008:1011:Howard Helberg:/home/howard:/bin/bash
total 36K
4.0k drwxr-xr-x 22 root       root       4.0k aug 24 16:09 ..
4.0K drwxr-x---  3 waldo      waldo      4.0K Apr 29  2020 waldo
4.0K drwxr-xr-x  2 rajesh     rajesh     4.0K Dec  2  2019 rajesh
4.0K drwxr-xr-x  2 penny      penny      4.0K Dec  2  2019 penny
4.0K drwxr-xr-x  2 leonard    leonard    4.0K Dec  2  2019 leonard
4.0K drwxr-xr-x  2 howard     howard     4.0K Dec  2  2019 howard
4.0K drwxr-xr-x  2 bernadette bernadette 4.0K Dec  2  2019 bernadette
4.0K drwxr-xr-x  2 amy        amy        4.0K Dec  2  2019 amy
4.0K drwxr-xr-x  9 root       root       4.0K Dec  2  2019 .

rajesh penny leonard howard bernadette amy

waldo@admirer:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=101(Debian-exim) gid=104(Debian-exim) groups=104(Debian-exim)
uid=102(avahi-autoipd) gid=105(avahi-autoipd) groups=105(avahi-autoipd)
uid=103(messagebus) gid=106(messagebus) groups=106(messagebus)
uid=104(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1000(waldo) gid=1000(waldo) groups=1000(waldo),1001(admins)
uid=105(mysql) gid=110(mysql) groups=110(mysql)
uid=106(ftp) gid=111(ftp) groups=111(ftp)
uid=1001(ftpuser) gid=1002(ftpuser) groups=1002(ftpuser),111(ftp)
uid=1002(penny) gid=1005(penny) groups=1005(penny),1001(admins)
uid=1003(rajesh) gid=1006(rajesh) groups=1006(rajesh),1003(developers)
uid=1004(amy) gid=1007(amy) groups=1007(amy),1003(developers)
uid=1005(leonard) gid=1008(leonard) groups=1008(leonard),1003(developers)
uid=1007(bernadette) gid=1010(bernadette) groups=1010(bernadette),1004(designers)
uid=1008(howard) gid=1011(howard) groups=1011(howard),1004(designers)

uid=1000(waldo) gid=1000(waldo) groups=1000(waldo),1001(admins) uid=1001(ftpuser) gid=1002(ftpuser) groups=1002(ftpuser),111(ftp) uid=1002(penny) gid=1005(penny) groups=1005(penny),1001(admins) uid=1003(rajesh) gid=1006(rajesh) groups=1006(rajesh),1003(developers) uid=1004(amy) gid=1007(amy) groups=1007(amy),1003(developers) uid=1005(leonard) gid=1008(leonard) groups=1008(leonard),1003(developers) uid=1007(bernadette) gid=1010(bernadette) groups=1010(bernadette),1004(designers) uid=1008(howard) gid=1011(howard) groups=1011(howard),1004(designers)

SUIDs


waldo@admirer:~$ find / -perm -04000 -ls -type f 2>/dev/null
   131961     40 -rwsr-xr-x   1 root     root        40536 Mar 17  2021 /bin/su
   133355     40 -rwsr-xr-x   1 root     root        40200 May  4  2018 /bin/mount
   133356     28 -rwsr-xr-x   1 root     root        27616 May  4  2018 /bin/umount
   155669     32 -rwsr-xr-x   1 root     root        30800 Aug 21  2018 /bin/fusermount
   136408     60 -rwsr-xr-x   1 root     root        61240 Nov 10  2016 /bin/ping
   142625     16 -rwsr-xr-x   1 root     root        14848 Jan 26  2022 /usr/lib/policykit-1/polkit-agent-helper-1
   148301    432 -rwsr-xr-x   1 root     root       440728 Jul 15  2019 /usr/lib/openssh/ssh-keysign
   147093     44 -rwsr-xr--   1 root     messagebus    44056 Jun 26  2019 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
   142698     12 -rwsr-xr-x   1 root     root          10232 Mar 28  2017 /usr/lib/eject/dmcrypt-get-device
   143768   1004 -rwsr-xr-x   1 root     root        1027848 May  4  2021 /usr/sbin/exim4
   153914     52 -rwsr-xr-x   1 root     root          50040 Mar 17  2021 /usr/bin/chfn
   142623     28 -rwsr-xr-x   1 root     root          27456 Jan 26  2022 /usr/bin/pkexec
   132267     40 -rwsr-xr-x   1 root     root          40312 Mar 17  2021 /usr/bin/newgrp
   153918     60 -rwsr-xr-x   1 root     root          59680 Mar 17  2021 /usr/bin/passwd
   153915     40 -rwsr-xr-x   1 root     root          40504 Mar 17  2021 /usr/bin/chsh
   153917     76 -rwsr-xr-x   1 root     root          75792 Mar 17  2021 /usr/bin/gpasswd
   148738    140 -rwsr-xr-x   1 root     root         140944 Jan 23  2021 /usr/bin/sudo

SGIDs


waldo@admirer:~$ find / -perm -02000 -ls -type f 2>/dev/null
   132940     36 -rwxr-sr-x   1 root     shadow      35592 May 27  2017 /sbin/unix_chkpwd
    10161      4 drwxr-s---   2 debian-exim adm          4096 nov 16 08:57 /var/log/exim4
    11489      4 drwxr-s---   2 mysql       adm          4096 nov 16 08:57 /var/log/mysql
      189      4 drwxrwsr-x   2 root        staff        4096 Jun 10  2018 /var/local
      247      4 drwxrwsr-x   2 root        mail         4096 aug 24 16:05 /var/mail
   153916     24 -rwxr-sr-x   1 root        shadow      22808 Mar 17  2021 /usr/bin/expiry
   148294    352 -rwxr-sr-x   1 root        ssh        358624 Jul 15  2019 /usr/bin/ssh-agent
   153913     72 -rwxr-sr-x   1 root        shadow      71856 Mar 17  2021 /usr/bin/chage
   147652     40 -rwxr-sr-x   1 root        crontab     40264 Oct 29  2021 /usr/bin/crontab
   150849     12 -rwxr-sr-x   1 root        mail        10952 Dec 25  2016 /usr/bin/dotlock.mailutils
   135587     16 -rwxr-sr-x   1 root        tty         14768 Apr 12  2017 /usr/bin/bsd-write
   131199     28 -rwxr-sr-x   1 root        tty         27440 May  4  2018 /usr/bin/wall
   148062     20 -rwxr-sr-x   1 root        mail        19008 Jan 17  2017 /usr/bin/dotlockfile
   131122      4 drwxrwsr-x  10 root        staff        4096 Nov 29  2019 /usr/local
   131132      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/etc
   131128      4 drwxrwsr-x   4 root        staff        4096 Nov 29  2019 /usr/local/lib
   146998      4 drwxrwsr-x   3 root        staff        4096 Nov 29  2019 /usr/local/lib/python3.5
   146999      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/lib/python3.5/dist-packages
   139885      4 drwxrwsr-x   4 root        staff        4096 aug 24 16:06 /usr/local/lib/python2.7
   160168      4 drwxrwsr-x   2 root        staff        4096 aug 24 16:06 /usr/local/lib/python2.7/site-packages
   139887      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/lib/python2.7/dist-packages
   131130      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/sbin
   131127      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/games
   131126      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/bin
   131124      4 drwxrwsr-x   7 root        staff        4096 Nov 29  2019 /usr/local/share
   132060      4 drwxrwsr-x   6 root        staff        4096 Nov 29  2019 /usr/local/share/xml
   152068      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/xml/misc
   152065      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/xml/declaration
   152069      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/xml/schema
   152066      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/xml/entities
   147280      4 drwxrwsr-x   7 root        staff        4096 Nov 29  2019 /usr/local/share/sgml
   147284      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/sgml/misc
   147281      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/sgml/declaration
   147285      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/sgml/stylesheet
   147282      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/sgml/dtd
   147283      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/sgml/entities
   131125      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/man
   147270      4 drwxrwsr-x   3 root        staff        4096 Nov 29  2019 /usr/local/share/emacs
   147271      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/emacs/site-lisp
   152077      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/share/ca-certificates
   131129      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/include
   131131      4 drwxrwsr-x   2 root        staff        4096 Nov 29  2019 /usr/local/src

Processes


waldo@admirer:~$ ps -auxwww
USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root         1  0.0  0.0  15796  1840 ?        Ss   08:35   0:01 init [2]
root       440  0.0  0.1  39344  4168 ?        Ss   08:35   0:00 udevd --daemon
root      1373  0.0  0.0 250108  2584 ?        Ssl  08:35   0:00 /usr/sbin/rsyslogd
root      1428  0.0  0.2 200204 10524 ?        Sl   08:35   0:18 /usr/bin/vmtoolsd
root      1487  0.0  0.6 269324 28012 ?        Ss   08:35   0:02 /usr/sbin/apache2 -k start
root      1580  0.0  0.0  28456  3012 ?        S    08:35   0:00 /usr/sbin/vsftpd
message+  1584  0.0  0.0  32872  2500 ?        Ss   08:35   0:00 /usr/bin/dbus-daemon --system
root      1635  0.0  0.0  21644  3484 ?        S    08:35   0:00 /usr/sbin/bluetoothd
root      1648  0.0  0.0  35912  2264 ?        Ss   08:35   0:00 /usr/sbin/irqbalance --pid=/var/run/irqbalance.pid
root      1681  0.0  0.0  28528  2952 ?        S    08:35   0:00 /usr/sbin/elogind -D
root      1683  0.0  0.0  29664  2524 ?        Ss   08:35   0:00 /usr/sbin/cron
root      1719  0.0  0.0  69960  3804 ?        Ss   08:35   0:00 /usr/sbin/sshd
root      1751  0.0  0.0   9780  2932 ?        S    08:35   0:00 /bin/bash /usr/bin/mysqld_safe
mysql     1898  0.1  2.1 680184 85136 ?        Sl   08:35   0:38 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/x86_64-linux-gnu/mariadb18/plugin --user=mysql --skip-log-error --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock --port=3306
root      1899  0.0  0.0   4192   656 ?        S    08:35   0:00 logger -t mysqld -p daemon error
Debian-+  2289  0.0  0.0  56416  3000 ?        Ss   08:36   0:00 /usr/sbin/exim4 -bd -q30m
root      2334  0.0  0.0  14520  1632 tty1     Ss+  08:36   0:00 /sbin/getty 38400 tty1
root      2335  0.0  0.0  14520  1800 tty2     Ss+  08:36   0:00 /sbin/getty 38400 tty2
root      2336  0.0  0.0  14520  1748 tty3     Ss+  08:36   0:00 /sbin/getty 38400 tty3
root      2337  0.0  0.0  14520  1640 tty4     Ss+  08:36   0:00 /sbin/getty 38400 tty4
root      2338  0.0  0.0  14520  1632 tty5     Ss+  08:36   0:00 /sbin/getty 38400 tty5
root      2339  0.0  0.0  14520  1632 tty6     Ss+  08:36   0:00 /sbin/getty 38400 tty6
www-data  4874  0.0  0.3 270256 16124 ?        S    11:48   0:00 /usr/sbin/apache2 -k start
root      5714  0.0  0.1 108804  7200 ?        Ss   14:06   0:00 sshd: waldo [priv]
waldo     5721  0.0  0.0 108804  3820 ?        S    14:06   0:00 sshd: waldo@pts/0
waldo     5722  0.0  0.1  20936  4928 pts/0    Ss   14:06   0:00 -bash
waldo     5969  0.0  0.0  19188  2540 pts/0    R+   14:40   0:00 ps -auxwww

/usr/sbin/vsftpd /usr/sbin/bluetoothd /usr/sbin/cron

Cron & Systemd


waldo@admirer:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for waldo
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# m h dom mon dow user	command
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
-bash: systemctl: command not found

no systemd

waldo@admirer:~$ /usr/sbin/service --status-all | grep -v '-'
 [ + ]  apache2
 [ + ]  bluetooth
 [ + ]  cron
 [ + ]  dbus
 [ + ]  elogind
 [ + ]  eudev
 [ ? ]  hwclock.sh
 [ + ]  irqbalance
 [ ? ]  kmod
 [ ? ]  networking
 [ + ]  rsyslog
 [ + ]  ssh
 [ + ]  vsftpd

Sudo Version


waldo@admirer:~$ sudo --version
Sudo version 1.8.19p1
Sudoers policy plugin version 1.8.19p1
Sudoers file grammar version 45
Sudoers I/O plugin version 1.8.19p1

Glibc Version


waldo@admirer:~$ ldd --version
ldd (Debian GLIBC 2.24-11+deb9u4) 2.24
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.