System/Kernel
app@chemistry:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2a9f157890930ced4c3ad0e74fc1b1b84aad71e6, for GNU/Linux 3.2.0, stripped
Linux chemistry 5.4.0-196-generic #216-Ubuntu SMP Thu Aug 29 13:26:53 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04.6 LTS"
NAME="Ubuntu"
VERSION="20.04.6 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.6 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal64-bit
Ubuntu 20.04.6 LTS (Focal Fossa)
5.4.0-196-generic
Networks
app@chemistry:~$ ip route ; arp -a
default via 10.129.0.1 dev eth0
10.129.0.0/16 dev eth0 proto kernel scope link src 10.129.254.176
? (10.129.0.1) at 00:50:56:94:39:11 [ether] on eth0app@chemistry:~$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:5000 0.0.0.0:* LISTEN 1039/python3.9
tcp 0 1 10.129.254.176:41972 8.8.8.8:53 SYN_SENT -
tcp 0 360 10.129.254.176:22 10.10.15.34:54072 ESTABLISHED -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 0.0.0.0:68 0.0.0.0:* -
udp 0 0 127.0.0.1:55805 127.0.0.53:53 ESTABLISHED -127.0.0.1:8080
Users & Groups
app@chemistry:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:106::/nonexistent:/usr/sbin/nologin
syslog:x:104:110::/home/syslog:/usr/sbin/nologin
_apt:x:105:65534::/nonexistent:/usr/sbin/nologin
tss:x:106:111:TPM software stack,,,:/var/lib/tpm:/bin/false
uuidd:x:107:112::/run/uuidd:/usr/sbin/nologin
tcpdump:x:108:113::/nonexistent:/usr/sbin/nologin
landscape:x:109:115::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:110:1::/var/cache/pollinate:/bin/false
fwupd-refresh:x:111:116:fwupd-refresh user,,,:/run/systemd:/usr/sbin/nologin
usbmux:x:112:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
sshd:x:113:65534::/run/sshd:/usr/sbin/nologin
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
rosa:x:1000:1000:rosa:/home/rosa:/bin/bash
lxd:x:998:100::/var/snap/lxd/common/lxd:/bin/false
app:x:1001:1001:,,,:/home/app:/bin/bash
_laurel:x:997:997::/var/log/laurel:/bin/false
total 16
drwxr-xr-x 4 root root 4096 Jun 16 23:10 ./
drwxr-xr-x 19 root root 4096 Oct 11 11:17 ../
drwxr-xr-x 8 app app 4096 Oct 9 20:18 app/
drwxr-xr-x 5 rosa rosa 4096 Jun 17 01:51 rosa/rosa
app@chemistry:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(systemd-timesync) gid=104(systemd-timesync) groups=104(systemd-timesync)
uid=103(messagebus) gid=106(messagebus) groups=106(messagebus)
uid=104(syslog) gid=110(syslog) groups=110(syslog),4(adm),5(tty)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(tss) gid=111(tss) groups=111(tss)
uid=107(uuidd) gid=112(uuidd) groups=112(uuidd)
uid=108(tcpdump) gid=113(tcpdump) groups=113(tcpdump)
uid=109(landscape) gid=115(landscape) groups=115(landscape)
uid=110(pollinate) gid=1(daemon) groups=1(daemon)
uid=111(fwupd-refresh) gid=116(fwupd-refresh) groups=116(fwupd-refresh)
uid=112(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=113(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=1000(rosa) gid=1000(rosa) groups=1000(rosa)
uid=998(lxd) gid=100(users) groups=100(users)
uid=1001(app) gid=1001(app) groups=1001(app)
uid=997(_laurel) gid=997(_laurel) groups=997(_laurel)uid=1001(app) gid=1001(app) groups=1001(app)
uid=1000(rosa) gid=1000(rosa) groups=1000(rosa)
SUIDs
app@chemistry:~$ find / -perm -04000 -ls -type f 2>/dev/null
293 133 -rwsr-xr-x 1 root root 135960 Apr 24 16:45 /snap/snapd/21759/usr/lib/snapd/snap-confine
850 84 -rwsr-xr-x 1 root root 85064 Feb 6 2024 /snap/core20/2379/usr/bin/chfn
856 52 -rwsr-xr-x 1 root root 53040 Feb 6 2024 /snap/core20/2379/usr/bin/chsh
926 87 -rwsr-xr-x 1 root root 88464 Feb 6 2024 /snap/core20/2379/usr/bin/gpasswd
1010 55 -rwsr-xr-x 1 root root 55528 Apr 9 2024 /snap/core20/2379/usr/bin/mount
1019 44 -rwsr-xr-x 1 root root 44784 Feb 6 2024 /snap/core20/2379/usr/bin/newgrp
1034 67 -rwsr-xr-x 1 root root 68208 Feb 6 2024 /snap/core20/2379/usr/bin/passwd
1144 67 -rwsr-xr-x 1 root root 67816 Apr 9 2024 /snap/core20/2379/usr/bin/su
1145 163 -rwsr-xr-x 1 root root 166056 Apr 4 2023 /snap/core20/2379/usr/bin/sudo
1203 39 -rwsr-xr-x 1 root root 39144 Apr 9 2024 /snap/core20/2379/usr/bin/umount
1292 51 -rwsr-xr-- 1 root systemd-resolve 51344 Oct 25 2022 /snap/core20/2379/usr/lib/dbus-1.0/dbus-daemon-launch-helper
1666 467 -rwsr-xr-x 1 root root 477672 Jan 2 2024 /snap/core20/2379/usr/lib/openssh/ssh-keysign
131261 40 -rwsr-xr-x 1 root root 39144 Apr 9 2024 /usr/bin/umount
131773 40 -rwsr-xr-x 1 root root 39144 Mar 7 2020 /usr/bin/fusermount
131998 164 -rwsr-xr-x 1 root root 166056 Apr 4 2023 /usr/bin/sudo
131592 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
131250 56 -rwsr-xr-x 1 root root 55528 Apr 9 2024 /usr/bin/mount
144941 88 -rwsr-xr-x 1 root root 88464 Feb 6 2024 /usr/bin/gpasswd
144458 68 -rwsr-xr-x 1 root root 67816 Apr 9 2024 /usr/bin/su
131860 44 -rwsr-xr-x 1 root root 44784 Feb 6 2024 /usr/bin/newgrp
144943 68 -rwsr-xr-x 1 root root 68208 Feb 6 2024 /usr/bin/passwd
144936 52 -rwsr-xr-x 1 root root 53040 Feb 6 2024 /usr/bin/chsh
144933 84 -rwsr-xr-x 1 root root 85064 Feb 6 2024 /usr/bin/chfn
244667 152 -rwsr-xr-x 1 root root 155080 Jul 26 02:58 /usr/lib/snapd/snap-confine
204133 468 -rwsr-xr-x 1 root root 477672 Jan 2 2024 /usr/lib/openssh/ssh-keysign
132478 16 -rwsr-xr-x 1 root root 14488 Jul 8 2019 /usr/lib/eject/dmcrypt-get-device
132471 52 -rwsr-xr-- 1 root messagebus 51344 Oct 25 2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
132686 24 -rwsr-xr-x 1 root root 22840 Feb 21 2022 /usr/lib/policykit-1/polkit-agent-helper-1SGIDs
app@chemistry:~$ find / -perm -02000 -ls -type f 2>/dev/null
845 83 -rwxr-sr-x 1 root shadow 84512 Feb 6 2024 /snap/core20/2379/usr/bin/chage
906 31 -rwxr-sr-x 1 root shadow 31312 Feb 6 2024 /snap/core20/2379/usr/bin/expiry
1136 343 -rwxr-sr-x 1 root crontab 350504 Jan 2 2024 /snap/core20/2379/usr/bin/ssh-agent
7373 43 -rwxr-sr-x 1 root shadow 43168 Jan 10 2024 /snap/core20/2379/usr/sbin/pam_extrausers_chkpwd
7417 43 -rwxr-sr-x 1 root shadow 43160 Jan 10 2024 /snap/core20/2379/usr/sbin/unix_chkpwd
12041 0 drwxrwsr-x 2 root mail 3 Jul 4 04:33 /snap/core20/2379/var/mail
141674 44 -rwxr-sr-x 1 root shadow 43168 Jan 10 2024 /usr/sbin/pam_extrausers_chkpwd
142085 44 -rwxr-sr-x 1 root shadow 43160 Jan 10 2024 /usr/sbin/unix_chkpwd
204127 344 -rwxr-sr-x 1 root ssh 350504 Jan 2 2024 /usr/bin/ssh-agent
131605 16 -rwxr-sr-x 1 root tty 14488 Mar 30 2020 /usr/bin/bsd-write
131592 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
144938 32 -rwxr-sr-x 1 root shadow 31312 Feb 6 2024 /usr/bin/expiry
131690 44 -rwxr-sr-x 1 root crontab 43720 Feb 13 2020 /usr/bin/crontab
144927 84 -rwxr-sr-x 1 root shadow 84512 Feb 6 2024 /usr/bin/chage
144105 16 -rwxr-sr-x 1 root utmp 14648 Sep 30 2019 /usr/lib/x86_64-linux-gnu/utempter/utempter
143144 4 drwxrwsr-x 3 root staff 4096 Mar 14 2023 /usr/local/lib/python3.8
143145 4 drwxrwsr-x 2 root staff 4096 Mar 14 2023 /usr/local/lib/python3.8/dist-packages
1964 4 drwxr-sr-x 3 root systemd-journal 4096 Jun 15 18:23 /var/log/journal
4452 4 drwxr-sr-x 2 root systemd-journal 4096 Oct 11 11:59 /var/log/journal/50eeb7fac3464e29ad4e2725d371e6c5
1493 4 drwxrwsr-x 2 root staff 4096 Apr 15 2020 /var/local
1495 4 drwxrwsr-x 2 root mail 4096 Mar 14 2023 /var/mail
370 0 drwxr-sr-x 2 root systemd-journal 40 Oct 19 19:50 /run/log/journalProcesses
app@chemistry:~$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.5 168108 11384 ? Ss 19:49 0:01 /sbin/init maybe-ubiquity
root 486 0.0 1.5 70636 30024 ? S<s 19:50 0:00 /lib/systemd/systemd-journald
root 522 0.0 0.3 22772 6300 ? Ss 19:50 0:00 /lib/systemd/systemd-udevd
root 695 0.0 0.9 280136 17948 ? SLsl 19:50 0:00 /sbin/multipathd -d -s
root 735 0.0 0.0 2488 512 ? S 19:50 0:00 bpfilter_umh
systemd+ 737 0.0 0.3 90888 6084 ? Ssl 19:50 0:00 /lib/systemd/systemd-timesyncd
root 739 0.0 0.0 11356 1556 ? S<sl 19:50 0:00 /sbin/auditd
root 741 0.0 0.2 76600 4076 ? S<sl 19:50 0:00 /sbin/audispd
_laurel 744 0.0 0.3 10320 6420 ? S< 19:50 0:00 /usr/local/sbin/laurel --config /etc/laurel/config.toml
systemd+ 774 0.0 0.3 19080 7532 ? Ss 19:50 0:00 /lib/systemd/systemd-networkd
root 790 0.0 0.5 47548 10804 ? Ss 19:50 0:00 /usr/bin/VGAuthService
root 791 0.1 0.4 237812 8548 ? Ssl 19:50 0:06 /usr/bin/vmtoolsd
root 809 0.0 0.2 99900 5804 ? Ssl 19:50 0:00 /sbin/dhclient -1 -4 -v -i -pf /run/dhclient.eth0.pid -lf /var/lib/dhcp/dhclient.eth0.leases -I -df /var/lib/dhcp/dhclient6.eth0.leases eth0
root 826 0.0 0.3 235572 7360 ? Ssl 19:50 0:00 /usr/lib/accountsservice/accounts-daemon
message+ 827 0.0 0.2 7584 4724 ? Ss 19:50 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root 834 0.0 0.1 81960 3700 ? Ssl 19:50 0:00 /usr/sbin/irqbalance --foreground
root 837 0.0 0.9 29648 18196 ? Ss 19:50 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root 840 0.0 0.3 232732 6864 ? Ssl 19:50 0:00 /usr/lib/policykit-1/polkitd --no-debug
syslog 841 0.0 0.2 224344 5236 ? Ssl 19:50 0:00 /usr/sbin/rsyslogd -n -iNONE
root 850 0.0 1.4 1320052 29436 ? Ssl 19:50 0:01 /usr/lib/snapd/snapd
root 851 0.0 0.3 17360 7660 ? Ss 19:50 0:00 /lib/systemd/systemd-logind
root 855 0.0 0.6 393260 12220 ? Ssl 19:50 0:00 /usr/lib/udisks2/udisksd
root 921 0.0 0.5 315104 11272 ? Ssl 19:50 0:00 /usr/sbin/ModemManager
systemd+ 986 0.0 0.6 24972 13476 ? Ss 19:50 0:00 /lib/systemd/systemd-resolved
app 1039 0.0 4.6 272140 91724 ? Ssl 19:50 0:02 /usr/bin/python3.9 /home/app/app.py
root 1040 0.0 1.3 35520 27568 ? Ss 19:50 0:00 /usr/bin/python3.9 /opt/monitoring_site/app.py
root 1046 0.0 0.1 6816 3000 ? Ss 19:50 0:00 /usr/sbin/cron -f
daemon 1049 0.0 0.1 3796 2184 ? Ss 19:50 0:00 /usr/sbin/atd -f
root 1060 0.0 0.0 5828 1764 tty1 Ss+ 19:50 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root 1061 0.0 0.3 12188 6908 ? Ss 19:50 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root 1535 0.0 0.4 13820 9048 ? Rs 21:31 0:00 sshd: root@pts/0
root 1547 0.0 0.4 19112 9728 ? Ss 21:31 0:00 /lib/systemd/systemd --user
root 1550 0.0 0.1 169464 3416 ? S 21:31 0:00 (sd-pam)
root 1678 0.0 0.2 8172 5116 pts/0 Ss 21:31 0:00 -bash
root 1700 0.0 0.1 8412 3808 pts/0 S 21:31 0:00 su app
app 1701 0.0 0.2 8264 5080 pts/0 S 21:31 0:00 bash
app 1771 0.0 0.1 9080 3472 pts/0 R+ 21:38 0:00 ps -auxwww/usr/bin/python3.9 /opt/monitoring_site/app.py
/usr/sbin/cron -f
Cron & Systemd
app@chemistry:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for app
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# Example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED UNIT ACTI>
Sun 2024-10-20 00:00:00 UTC 2h 18min left Sat 2024-10-19 19:50:03 UTC 1h 50min ago logrotate.timer logr>
Sun 2024-10-20 00:00:00 UTC 2h 18min left Sat 2024-10-19 19:50:03 UTC 1h 50min ago man-db.timer man->
Sun 2024-10-20 00:16:21 UTC 2h 35min left Sat 2024-10-19 19:54:53 UTC 1h 46min ago motd-news.timer motd>
Sun 2024-10-20 03:10:34 UTC 5h 29min left Sat 2024-10-19 19:50:46 UTC 1h 50min ago e2scrub_all.timer e2sc>
Sun 2024-10-20 03:55:40 UTC 6h left Tue 2024-06-18 19:32:39 UTC 4 months 1 days ago apt-daily.timer apt->
Sun 2024-10-20 04:22:04 UTC 6h left Fri 2024-10-11 13:10:16 UTC 1 weeks 1 days ago fwupd-refresh.timer fwup>
Sun 2024-10-20 06:26:37 UTC 8h left Sat 2024-10-19 19:52:13 UTC 1h 48min ago apt-daily-upgrade.timer apt->
Sun 2024-10-20 20:05:04 UTC 22h left Sat 2024-10-19 20:05:04 UTC 1h 35min ago systemd-tmpfiles-clean.timer syst>
Mon 2024-10-21 00:00:00 UTC 1 day 2h left Sat 2024-10-19 19:50:03 UTC 1h 50min ago fstrim.timer fstr>
9 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-13/13 (END)Sudo Version
app@chemistry:~$ sudo --version
Sudo version 1.8.31
Sudoers policy plugin version 1.8.31
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.31Sudo version 1.8.31
Glibc Version
app@chemistry:~$ ldd --version
ldd (Ubuntu GLIBC 2.31-0ubuntu9.16) 2.31
Copyright (C) 2020 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.31-0ubuntu9.16) 2.31