System/Kernel
lnorgaard@keeper:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=33a5554034feb2af38e8c75872058883b2988bc5, for GNU/Linux 3.2.0, stripped
linux keeper 5.15.0-78-generic #85-ubuntu smp fri jul 7 15:25:09 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04.3 LTS"
PRETTY_NAME="Ubuntu 22.04.3 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.3 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy5.15.0-78-generic
Ubuntu 22.04.3 LTS (Jammy Jellyfish)
x86_64
Networks
lnorgaard@keeper:~$ arp -a
? (10.10.10.2) at 00:50:56:b9:f3:30 [ether] on eth0
lnorgaard@keeper:~$ netstat -antup4
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN -
tcp 0 1 10.10.11.227:39296 1.1.1.1:53 SYN_SENT -
tcp 0 1 10.10.11.227:40952 8.8.8.8:53 SYN_SENT -
tcp 0 284 10.10.11.227:22 10.10.14.20:56534 ESTABLISHED -
tcp 0 0 10.10.11.227:22 10.10.14.20:38250 ESTABLISHED -
udp 0 0 10.10.11.227:52336 8.8.8.8:53 ESTABLISHED -
udp 0 0 10.10.11.227:56820 1.1.1.1:53 ESTABLISHED -
udp 0 0 10.10.11.227:40653 8.8.8.8:53 ESTABLISHED -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 0.0.0.0:68 0.0.0.0:* -
udp 0 0 127.0.0.1:51544 127.0.0.53:53 ESTABLISHED -
udp 0 0 10.10.11.227:49968 1.1.1.1:53 ESTABLISHED - 127.0.0.1:3306
127.0.0.1:25
127.0.0.1:9000
Users & Groups
lnorgaard@keeper:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:106::/nonexistent:/usr/sbin/nologin
syslog:x:104:110::/home/syslog:/usr/sbin/nologin
_apt:x:105:65534::/nonexistent:/usr/sbin/nologin
uuidd:x:106:111::/run/uuidd:/usr/sbin/nologin
tcpdump:x:107:112::/nonexistent:/usr/sbin/nologin
lnorgaard:x:1000:1000:lnorgaard,,,:/home/lnorgaard:/bin/bash
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
sshd:x:108:65534::/run/sshd:/usr/sbin/nologin
mysql:x:109:118:MySQL Server,,,:/nonexistent:/bin/false
fetchmail:x:110:65534::/var/lib/fetchmail:/bin/false
postfix:x:111:120::/var/spool/postfix:/usr/sbin/nologin
_laurel:x:998:998::/var/log/laurel:/bin/false
total 12
drwxr-xr-x 3 root root 4096 may 24 16:09 ./
drwxr-xr-x 18 root root 4096 jul 27 13:52 ../
drwxr-xr-x 4 lnorgaard lnorgaard 4096 aug 14 02:22 lnorgaard/lnorgaard@keeper:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(systemd-timesync) gid=104(systemd-timesync) groups=104(systemd-timesync)
uid=103(messagebus) gid=106(messagebus) groups=106(messagebus)
uid=104(syslog) gid=110(syslog) groups=110(syslog),4(adm),5(tty)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(uuidd) gid=111(uuidd) groups=111(uuidd)
uid=107(tcpdump) gid=112(tcpdump) groups=112(tcpdump)
uid=1000(lnorgaard) gid=1000(lnorgaard) groups=1000(lnorgaard)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=108(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=109(mysql) gid=118(mysql) groups=118(mysql)
uid=110(fetchmail) gid=65534(nogroup) groups=65534(nogroup)
uid=111(postfix) gid=120(postfix) groups=120(postfix)
uid=998(_laurel) gid=998(_laurel) groups=998(_laurel)uid=1000(lnorgaard) gid=1000(lnorgaard) groups=1000(lnorgaard)
SUIDs
lnorgaard@keeper:~$ find / -perm -04000 -ls -type f 2>/dev/null
6188 36 -rwsr-xr-x 1 root root 35192 Feb 21 2022 /usr/bin/umount
6446 44 -rwsr-xr-x 1 root root 44808 Nov 24 2022 /usr/bin/chsh
8428 36 -rwsr-xr-x 1 root root 35200 Mar 23 2022 /usr/bin/fusermount3
5177 40 -rwsr-xr-x 1 root root 40496 Nov 24 2022 /usr/bin/newgrp
6186 48 -rwsr-xr-x 1 root root 47480 Feb 21 2022 /usr/bin/mount
6450 60 -rwsr-xr-x 1 root root 59976 Nov 24 2022 /usr/bin/passwd
5562 56 -rwsr-xr-x 1 root root 55672 Feb 21 2022 /usr/bin/su
6448 72 -rwsr-xr-x 1 root root 72072 Nov 24 2022 /usr/bin/gpasswd
6445 72 -rwsr-xr-x 1 root root 72712 Nov 24 2022 /usr/bin/chfn
9110 228 -rwsr-xr-x 1 root root 232416 Apr 3 20:00 /usr/bin/sudo
19613 332 -rwsr-xr-x 1 root root 338536 Jul 19 21:41 /usr/lib/openssh/ssh-keysign
52946 36 -rwsr-xr-- 1 root messagebus 35112 Oct 25 2022 /usr/lib/dbus-1.0/dbus-daemon-launch-helperSGIDs
lnorgaard@keeper:~$ find / -perm -02000 -ls -type f 2>/dev/null
15330 24 -r-xr-sr-x 1 root postdrop 22960 apr 10 13:35 /usr/sbin/postdrop
15340 24 -r-xr-sr-x 1 root postdrop 22912 apr 10 13:35 /usr/sbin/postqueue
6199 28 -rwxr-sr-x 1 root shadow 26776 Feb 2 2023 /usr/sbin/unix_chkpwd
6197 24 -rwxr-sr-x 1 root shadow 22680 Feb 2 2023 /usr/sbin/pam_extrausers_chkpwd
86011 4 drwxrwsr-x 2 root staff 4096 may 24 16:09 /usr/local/share/fonts
6444 72 -rwxr-sr-x 1 root shadow 72184 Nov 24 2022 /usr/bin/chage
24033 40 -rwxr-sr-x 1 root crontab 39568 Mar 23 2022 /usr/bin/crontab
6447 24 -rwxr-sr-x 1 root shadow 23136 Nov 24 2022 /usr/bin/expiry
5420 24 -rwxr-sr-x 1 root tty 22904 Feb 21 2022 /usr/bin/wall
4990 24 -rwxr-sr-x 1 root tty 22912 Feb 21 2022 /usr/bin/write.ul
7897 288 -rwxr-sr-x 1 root _ssh 293304 jul 19 21:41 /usr/bin/ssh-agent
224 4 drwxrwsr-x 2 root staff 4096 may 24 16:09 /var/local
3824 4 drwxr-s--- 4 www-data root 4096 may 24 16:09 /var/cache/request-tracker4
3319 4 drwx--s--- 2 postfix postdrop 4096 aug 12 21:00 /var/spool/postfix/public
285 4 drwxrwsr-x 2 root mail 4096 aug 14 03:33 /var/mail
3833 4 drwxr-sr-x 2 www-data www-data 4096 may 24 16:09 /var/log/request-tracker4
901 4 drwxr-sr-x 3 root systemd-journal 4096 may 24 16:09 /var/log/journal
55 4 drwxr-sr-x 2 root systemd-journal 4096 aug 14 13:41 /var/log/journal/41fddb313f8a42e2b5be8c82bf9caa9f
4200 4 drwxr-s--- 2 mysql adm 4096 may 24 16:09 /var/log/mysql
3830 4 drwxr-s--- 3 www-data root 4096 may 24 16:09 /var/lib/request-tracker4
337 0 drwxr-sr-x 2 root systemd-journal 40 aug 12 21:00 /run/log/journalProcesses
lnorgaard@keeper:~$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
lnorgaa+ 17063 0.0 0.2 16928 9132 ? Ss 16:12 0:00 /lib/systemd/systemd --user
lnorgaa+ 17088 0.0 0.1 10988 5124 pts/0 Ss+ 16:12 0:00 -bash
lnorgaa+ 17162 0.0 0.1 11100 5148 pts/1 Ss 16:19 0:00 -bash
lnorgaa+ 17279 0.0 0.0 12944 3788 pts/1 R+ 16:26 0:00 ps -auxwwwCron & Systemd
lnorgaard@keeper:~$ crontab -l ; cat /etc/crontab ; systemctl list-timer
no crontab for lnorgaard
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
Unknown command verb list-timer.Sudo Version
lnorgaard@keeper:~$ sudo --version
Sudo version 1.9.9
Sudoers policy plugin version 1.9.9
Sudoers file grammar version 48
Sudoers I/O plugin version 1.9.9
Sudoers audit plugin version 1.9.9Sudo version 1.9.9
Glibc Version
lnorgaard@keeper:~$ ldd --version
ldd (Ubuntu GLIBC 2.35-0ubuntu3.1) 2.35
Copyright (C) 2022 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.35-0ubuntu3.1) 2.35