System/Kernel
www-data@openadmin:/opt/ona/www$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=12f73d7a8e226c663034529c8dd20efec22dde54, stripped
linux openadmin 4.15.0-70-generic #79-ubuntu smp tue nov 12 10:36:11 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.3 LTS"
NAME="Ubuntu"
VERSION="18.04.3 LTS (Bionic Beaver)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 18.04.3 LTS"
VERSION_ID="18.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=bionic
UBUNTU_CODENAME=bionicUbuntu 18.04.3 LTS (Bionic Beaver)
ELF 64-bit LSB shared object
openadmin 4.15.0-70-generic
x86-64
Networks
www-data@openadmin:/opt/ona/www$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:52846 0.0.0.0:* LISTEN -
tcp 0 1 10.10.10.171:49710 1.1.1.1:53 SYN_SENT -
tcp 0 301 10.10.10.171:52462 10.10.14.5:9999 ESTABLISHED 18567/sh
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 127.0.0.1:42609 127.0.0.53:53 ESTABLISHED -
udp 0 0 10.10.10.171:50841 1.1.1.1:53 ESTABLISHED - 127.0.0.1:3306
127.0.0.1:52846
127.0.0.53:53
Users
www-data@openadmin:/opt/ona/www$ cat /etc/passwd ; ls -lasht /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd/netif:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd/resolve:/usr/sbin/nologin
syslog:x:102:106::/home/syslog:/usr/sbin/nologin
messagebus:x:103:107::/nonexistent:/usr/sbin/nologin
_apt:x:104:65534::/nonexistent:/usr/sbin/nologin
lxd:x:105:65534::/var/lib/lxd/:/bin/false
uuidd:x:106:110::/run/uuidd:/usr/sbin/nologin
dnsmasq:x:107:65534:dnsmasq,,,:/var/lib/misc:/usr/sbin/nologin
landscape:x:108:112::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:109:1::/var/cache/pollinate:/bin/false
sshd:x:110:65534::/run/sshd:/usr/sbin/nologin
jimmy:x:1000:1000:jimmy:/home/jimmy:/bin/bash
mysql:x:111:114:MySQL Server,,,:/nonexistent:/bin/false
joanna:x:1001:1001:,,,:/home/joanna:/bin/bash
total 16K
4.0K drwxr-xr-x 24 root root 4.0K Aug 17 2021 ..
4.0K drwxr-x--- 5 joanna joanna 4.0K Jul 27 2021 joanna
4.0K drwxr-x--- 5 jimmy jimmy 4.0K Nov 22 2019 jimmy
4.0K drwxr-xr-x 4 root root 4.0K Nov 22 2019 .root
joanna
jimmy
SUIDs
www-data@openadmin:/opt/ona/www$ find / -perm -04000 -ls -type f 2>/dev/null
1501 428 -rwsr-xr-x 1 root root 436552 Mar 4 2019 /usr/lib/openssh/ssh-keysign
1318 12 -rwsr-xr-x 1 root root 10232 Mar 28 2017 /usr/lib/eject/dmcrypt-get-device
1094 108 -rwsr-sr-x 1 root root 109432 Jul 12 2019 /usr/lib/snapd/snap-confine
7657 100 -rwsr-xr-x 1 root root 100760 Nov 23 2018 /usr/lib/x86_64-linux-gnu/lxc/lxc-user-nic
1311 44 -rwsr-xr-- 1 root messagebus 42992 Jun 10 2019 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
1505 16 -rwsr-xr-x 1 root root 14328 Mar 27 2019 /usr/lib/policykit-1/polkit-agent-helper-1
947 40 -rwsr-xr-x 1 root root 40344 Mar 22 2019 /usr/bin/newgrp
984 24 -rwsr-xr-x 1 root root 22520 Mar 27 2019 /usr/bin/pkexec
946 40 -rwsr-xr-x 1 root root 37136 Mar 22 2019 /usr/bin/newgidmap
1547 688 -rwsr-xr-x 1 root root 703408 Jun 11 2021 /usr/bin/sudo
964 60 -rwsr-xr-x 1 root root 59640 Mar 22 2019 /usr/bin/passwd
948 40 -rwsr-xr-x 1 root root 37136 Mar 22 2019 /usr/bin/newuidmap
744 44 -rwsr-xr-x 1 root root 44528 Mar 22 2019 /usr/bin/chsh
1125 20 -rwsr-xr-x 1 root root 18448 Jun 28 2019 /usr/bin/traceroute6.iputils
742 76 -rwsr-xr-x 1 root root 76496 Mar 22 2019 /usr/bin/chfn
837 76 -rwsr-xr-x 1 root root 75824 Mar 22 2019 /usr/bin/gpasswd
691 52 -rwsr-sr-x 1 daemon daemon 51464 Feb 20 2018 /usr/bin/at
262277 64 -rwsr-xr-x 1 root root 64424 Jun 28 2019 /bin/ping
262279 28 -rwsr-xr-x 1 root root 26696 Aug 22 2019 /bin/umount
262293 44 -rwsr-xr-x 1 root root 44664 Mar 22 2019 /bin/su
262235 44 -rwsr-xr-x 1 root root 43088 Aug 22 2019 /bin/mount
262226 32 -rwsr-xr-x 1 root root 30800 Aug 11 2016 /bin/fusermount
66 40 -rwsr-xr-x 1 root root 40152 May 15 2019 /snap/core/7270/bin/mount
80 44 -rwsr-xr-x 1 root root 44168 May 7 2014 /snap/core/7270/bin/ping
81 44 -rwsr-xr-x 1 root root 44680 May 7 2014 /snap/core/7270/bin/ping6
98 40 -rwsr-xr-x 1 root root 40128 Mar 25 2019 /snap/core/7270/bin/su
116 27 -rwsr-xr-x 1 root root 27608 May 15 2019 /snap/core/7270/bin/umount
2657 71 -rwsr-xr-x 1 root root 71824 Mar 25 2019 /snap/core/7270/usr/bin/chfn
2659 40 -rwsr-xr-x 1 root root 40432 Mar 25 2019 /snap/core/7270/usr/bin/chsh
2735 74 -rwsr-xr-x 1 root root 75304 Mar 25 2019 /snap/core/7270/usr/bin/gpasswd
2827 39 -rwsr-xr-x 1 root root 39904 Mar 25 2019 /snap/core/7270/usr/bin/newgrp
2840 53 -rwsr-xr-x 1 root root 54256 Mar 25 2019 /snap/core/7270/usr/bin/passwd
2950 134 -rwsr-xr-x 1 root root 136808 Jun 10 2019 /snap/core/7270/usr/bin/sudo
3049 42 -rwsr-xr-- 1 root systemd-resolve 42992 Jun 10 2019 /snap/core/7270/usr/lib/dbus-1.0/dbus-daemon-launch-helper
3419 419 -rwsr-xr-x 1 root root 428240 Mar 4 2019 /snap/core/7270/usr/lib/openssh/ssh-keysign
6452 101 -rwsr-sr-x 1 root root 102600 Jun 21 2019 /snap/core/7270/usr/lib/snapd/snap-confine
7622 386 -rwsr-xr-- 1 root dip 394984 Jun 12 2018 /snap/core/7270/usr/sbin/pppd
66 40 -rwsr-xr-x 1 root root 40152 Oct 10 2019 /snap/core/8039/bin/mount
80 44 -rwsr-xr-x 1 root root 44168 May 7 2014 /snap/core/8039/bin/ping
81 44 -rwsr-xr-x 1 root root 44680 May 7 2014 /snap/core/8039/bin/ping6
98 40 -rwsr-xr-x 1 root root 40128 Mar 25 2019 /snap/core/8039/bin/su
116 27 -rwsr-xr-x 1 root root 27608 Oct 10 2019 /snap/core/8039/bin/umount
2665 71 -rwsr-xr-x 1 root root 71824 Mar 25 2019 /snap/core/8039/usr/bin/chfn
2667 40 -rwsr-xr-x 1 root root 40432 Mar 25 2019 /snap/core/8039/usr/bin/chsh
2743 74 -rwsr-xr-x 1 root root 75304 Mar 25 2019 /snap/core/8039/usr/bin/gpasswd
2835 39 -rwsr-xr-x 1 root root 39904 Mar 25 2019 /snap/core/8039/usr/bin/newgrp
2848 53 -rwsr-xr-x 1 root root 54256 Mar 25 2019 /snap/core/8039/usr/bin/passwd
2958 134 -rwsr-xr-x 1 root root 136808 Oct 11 2019 /snap/core/8039/usr/bin/sudo
3057 42 -rwsr-xr-- 1 root systemd-resolve 42992 Jun 10 2019 /snap/core/8039/usr/lib/dbus-1.0/dbus-daemon-launch-helper
3427 419 -rwsr-xr-x 1 root root 428240 Mar 4 2019 /snap/core/8039/usr/lib/openssh/ssh-keysign
6462 105 -rwsr-sr-x 1 root root 106696 Oct 30 2019 /snap/core/8039/usr/lib/snapd/snap-confine
7636 386 -rwsr-xr-- 1 root dip 394984 Jun 12 2018 /snap/core/8039/usr/sbin/pppdSGIDs
www-data@openadmin:/opt/ona/www$ find / -perm -02000 -ls -type f 2>/dev/null
1094 108 -rwsr-sr-x 1 root root 109432 Jul 12 2019 /usr/lib/snapd/snap-confine
8386 12 -rwxr-sr-x 1 root utmp 10232 Mar 11 2016 /usr/lib/x86_64-linux-gnu/utempter/utempter
816 24 -rwxr-sr-x 1 root shadow 22808 Mar 22 2019 /usr/bin/expiry
938 44 -rwxr-sr-x 1 root mlocate 43088 Mar 1 2018 /usr/bin/mlocate
1080 356 -rwxr-sr-x 1 root ssh 362640 Mar 4 2019 /usr/bin/ssh-agent
702 16 -rwxr-sr-x 1 root tty 14328 Jan 17 2018 /usr/bin/bsd-write
9204 32 -rwxr-sr-x 1 root tty 30800 Aug 22 2019 /usr/bin/wall
765 40 -rwxr-sr-x 1 root crontab 39352 Nov 16 2017 /usr/bin/crontab
737 72 -rwxr-sr-x 1 root shadow 71816 Mar 22 2019 /usr/bin/chage
691 52 -rwsr-sr-x 1 daemon daemon 51464 Feb 20 2018 /usr/bin/at
7912 4 drwxrwsr-x 3 root staff 4096 Aug 5 2019 /usr/local/lib/python3.6
7913 4 drwxrwsr-x 2 root staff 4096 Aug 5 2019 /usr/local/lib/python3.6/dist-packages
9833 4 drwxrwsr-x 2 root mail 4096 Aug 5 2019 /var/mail
9831 4 drwxrwsr-x 2 root staff 4096 Apr 24 2018 /var/local
10119 4 drwxr-sr-x 3 root systemd-journal 4096 Nov 21 2019 /var/log/journal
262171 4 drwxr-sr-x 2 root systemd-journal 4096 oct 11 12:28 /var/log/journal/44bf1480ab2c456192be5f80ba18261f
558 36 -rwxr-sr-x 1 root shadow 34816 Feb 27 2019 /sbin/pam_extrausers_chkpwd
590 36 -rwxr-sr-x 1 root shadow 34816 Feb 27 2019 /sbin/unix_chkpwd
389 0 drwxr-s--- 2 root dip 54 Jun 21 2019 /snap/core/7270/etc/chatscripts
791 0 drwxr-s--- 2 root dip 31 Jun 21 2019 /snap/core/7270/etc/ppp/peers
2575 35 -rwxr-sr-x 1 root shadow 35632 Apr 9 2018 /snap/core/7270/sbin/pam_extrausers_chkpwd
2615 35 -rwxr-sr-x 1 root shadow 35600 Apr 9 2018 /snap/core/7270/sbin/unix_chkpwd
2652 61 -rwxr-sr-x 1 root shadow 62336 Mar 25 2019 /snap/core/7270/usr/bin/chage
2672 36 -rwxr-sr-x 1 root systemd-network 36080 Apr 5 2016 /snap/core/7270/usr/bin/crontab
2701 15 -rwxr-sr-x 1 root mail 14856 Dec 7 2013 /snap/core/7270/usr/bin/dotlockfile
2713 23 -rwxr-sr-x 1 root shadow 22768 Mar 25 2019 /snap/core/7270/usr/bin/expiry
2810 15 -rwxr-sr-x 3 root mail 14592 Dec 3 2012 /snap/core/7270/usr/bin/mail-lock
2810 15 -rwxr-sr-x 3 root mail 14592 Dec 3 2012 /snap/core/7270/usr/bin/mail-touchlock
2810 15 -rwxr-sr-x 3 root mail 14592 Dec 3 2012 /snap/core/7270/usr/bin/mail-unlock
2943 351 -rwxr-sr-x 1 root crontab 358624 Mar 4 2019 /snap/core/7270/usr/bin/ssh-agent
3008 27 -rwxr-sr-x 1 root tty 27368 May 15 2019 /snap/core/7270/usr/bin/wall
6452 101 -rwsr-sr-x 1 root root 102600 Jun 21 2019 /snap/core/7270/usr/lib/snapd/snap-confine
7561 0 drwxrwsr-x 3 root staff 36 Jun 21 2019 /snap/core/7270/usr/local/lib/python3.5
7562 0 drwxrwsr-x 2 root staff 3 Jun 21 2019 /snap/core/7270/usr/local/lib/python3.5/dist-packages
12801 0 drwxrwsr-x 2 root staff 3 Apr 12 2016 /snap/core/7270/var/local
12812 0 drwxrwsr-x 2 root mail 3 Jun 21 2019 /snap/core/7270/var/mail
389 0 drwxr-s--- 2 root dip 54 Oct 30 2019 /snap/core/8039/etc/chatscripts
792 0 drwxr-s--- 2 root dip 31 Oct 30 2019 /snap/core/8039/etc/ppp/peers
2583 35 -rwxr-sr-x 1 root shadow 35632 Apr 9 2018 /snap/core/8039/sbin/pam_extrausers_chkpwd
2623 35 -rwxr-sr-x 1 root shadow 35600 Apr 9 2018 /snap/core/8039/sbin/unix_chkpwd
2660 61 -rwxr-sr-x 1 root shadow 62336 Mar 25 2019 /snap/core/8039/usr/bin/chage
2680 36 -rwxr-sr-x 1 root systemd-network 36080 Apr 5 2016 /snap/core/8039/usr/bin/crontab
2709 15 -rwxr-sr-x 1 root mail 14856 Dec 7 2013 /snap/core/8039/usr/bin/dotlockfile
2721 23 -rwxr-sr-x 1 root shadow 22768 Mar 25 2019 /snap/core/8039/usr/bin/expiry
2818 15 -rwxr-sr-x 3 root mail 14592 Dec 3 2012 /snap/core/8039/usr/bin/mail-lock
2818 15 -rwxr-sr-x 3 root mail 14592 Dec 3 2012 /snap/core/8039/usr/bin/mail-touchlock
2818 15 -rwxr-sr-x 3 root mail 14592 Dec 3 2012 /snap/core/8039/usr/bin/mail-unlock
2951 351 -rwxr-sr-x 1 root crontab 358624 Mar 4 2019 /snap/core/8039/usr/bin/ssh-agent
3016 27 -rwxr-sr-x 1 root tty 27368 Oct 10 2019 /snap/core/8039/usr/bin/wall
6462 105 -rwsr-sr-x 1 root root 106696 Oct 30 2019 /snap/core/8039/usr/lib/snapd/snap-confine
7575 0 drwxrwsr-x 3 root staff 36 Oct 30 2019 /snap/core/8039/usr/local/lib/python3.5
7576 0 drwxrwsr-x 2 root staff 3 Oct 30 2019 /snap/core/8039/usr/local/lib/python3.5/dist-packages
12820 0 drwxrwsr-x 2 root staff 3 Apr 12 2016 /snap/core/8039/var/local
12831 0 drwxrwsr-x 2 root mail 3 Oct 30 2019 /snap/core/8039/var/mailProcesses
www-data@openadmin:/opt/ona/www$ ps -aux | grep -i 'root' --color=auto
root 1 0.0 0.2 225108 8884 ? Ss 12:27 0:02 /sbin/init auto automatic-ubiquity noprompt
[...]
root 486 0.0 0.3 94852 13756 ? S<s 12:28 0:00 /lib/systemd/systemd-journald
root 492 0.0 0.0 97708 1924 ? Ss 12:28 0:00 /sbin/lvmetad -f
root 506 0.0 0.1 47144 6072 ? Ss 12:28 0:01 /lib/systemd/systemd-udevd
root 581 0.0 0.2 88224 9716 ? Ss 12:28 0:00 /usr/bin/VGAuthService
root 646 0.0 0.2 200592 11816 ? Ssl 12:28 0:06 /usr/bin/vmtoolsd
root 854 0.0 0.4 169100 17144 ? Ssl 12:28 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root 869 0.0 0.0 235516 2108 ? Ssl 12:28 0:00 /usr/bin/lxcfs /var/lib/lxcfs/
root 930 0.0 0.0 110544 1932 ? Ssl 12:28 0:00 /usr/sbin/irqbalance --foreground
root 931 0.0 0.1 286364 7096 ? Ssl 12:28 0:00 /usr/lib/accountsservice/accounts-daemon
root 997 0.0 0.1 62020 5704 ? Ss 12:28 0:00 /lib/systemd/systemd-logind
root 1012 0.0 0.0 30028 3168 ? Ss 12:28 0:00 /usr/sbin/cron -f
root 1026 0.0 0.6 779868 24452 ? Ssl 12:28 0:01 /usr/lib/snapd/snapd
root 1114 0.0 0.1 288880 6612 ? Ssl 12:28 0:00 /usr/lib/policykit-1/polkitd --no-debug
root 1192 0.0 0.0 14888 2036 tty1 Ss+ 12:28 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root 1203 0.0 0.1 72296 6420 ? Ss 12:28 0:00 /usr/sbin/sshd -D
root 1333 0.0 0.4 371272 20096 ? Ss 12:28 0:01 /usr/sbin/apache2 -k start
www-data 18645 0.0 0.0 11464 1080 pts/0 S+ 14:58 0:00 grep -i root --color=auto
/usr/sbin/cron -f
/usr/lib/policykit-1/polkitd --no-debug
Cron & Systemd
www-data@openadmin:/opt/ona/www$ crontab -l ; cat /etc/crontab ; systemctl list-timers --all
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED
thu 2023-01-12 16:39:00 UTC 2min 19s left Thu 2023-01-12 16:09:01 UTC 27min ag
thu 2023-01-12 17:07:54 UTC 31min left Thu 2023-01-12 14:21:52 UTC 2h 14min
fri 2023-01-13 02:05:31 UTC 9h left Thu 2023-01-12 14:21:52 UTC 2h 14min
fri 2023-01-13 06:28:39 UTC 13h left Thu 2023-01-12 14:21:52 UTC 2h 14min
fri 2023-01-13 14:36:46 UTC 22h left Thu 2023-01-12 14:36:46 UTC 1h 59min
mon 2023-01-16 00:00:00 UTC 3 days left Thu 2023-01-12 14:21:52 UTC 2h 14min
n/a n/a n/a n/a
n/a n/a n/a n/a
8 timers listed.Sudo Version
www-data@openadmin:/opt/ona/www$ sudo -V
Sudo version 1.9.7p1
sudo: PERM_ROOT: setresuid(0, -1, -1): Operation not permitted
sudo: error initializing audit plugin sudoers_auditSudo version 1.9.7p1