System/Kernel
tomcat@ophiuchi:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=a43fec47192ff49c2d3fed671f2be8df7e83784a, for GNU/Linux 3.2.0, stripped
linux ophiuchi 5.4.0-51-generic #56-ubuntu smp mon oct 5 14:28:49 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04 LTS"
NAME="Ubuntu"
VERSION="20.04 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04 LTS"
VERSION_ID="20.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal
5.4.0-51-generic
Ubuntu 20.04 LTS (Focal Fossa)
x86_64
Networks
tomcat@ophiuchi:~$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 301 10.10.10.227:46598 10.10.14.10:9999 ESTABLISHED 7168/nc
udp 0 0 127.0.0.53:53 0.0.0.0:* -
127.0.0.53:53
Users & Groups
tomcat@ophiuchi:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:106::/nonexistent:/usr/sbin/nologin
syslog:x:104:110::/home/syslog:/usr/sbin/nologin
_apt:x:105:65534::/nonexistent:/usr/sbin/nologin
tss:x:106:111:TPM software stack,,,:/var/lib/tpm:/bin/false
uuidd:x:107:112::/run/uuidd:/usr/sbin/nologin
tcpdump:x:108:113::/nonexistent:/usr/sbin/nologin
landscape:x:109:115::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:110:1::/var/cache/pollinate:/bin/false
sshd:x:111:65534::/run/sshd:/usr/sbin/nologin
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
lxd:x:998:100::/var/snap/lxd/common/lxd:/bin/false
tomcat:x:1001:1001::/opt/tomcat:/bin/false
admin:x:1000:1000:,,,:/home/admin:/bin/bash
total 12K
4.0K drwxr-xr-x 20 root root 4.0K Feb 5 2021 ..
4.0K drwxr-xr-x 4 admin admin 4.0K Jan 7 2021 admin
4.0K drwxr-xr-x 3 root root 4.0K Dec 28 2020 .
admin
tomcat@ophiuchi:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(systemd-timesync) gid=104(systemd-timesync) groups=104(systemd-timesync)
uid=103(messagebus) gid=106(messagebus) groups=106(messagebus)
uid=104(syslog) gid=110(syslog) groups=110(syslog),4(adm)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(tss) gid=111(tss) groups=111(tss)
uid=107(uuidd) gid=112(uuidd) groups=112(uuidd)
uid=108(tcpdump) gid=113(tcpdump) groups=113(tcpdump)
uid=109(landscape) gid=115(landscape) groups=115(landscape)
uid=110(pollinate) gid=1(daemon) groups=1(daemon)
uid=111(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=998(lxd) gid=100(users) groups=100(users)
uid=1001(tomcat) gid=1001(tomcat) groups=1001(tomcat)
uid=1000(admin) gid=1000(admin) groups=1000(admin)
SUIDs
tomcat@ophiuchi:~$ find / -perm -04000 -ls -type f 2>/dev/null
56 43 -rwsr-xr-x 1 root root 43088 Mar 5 2020 /snap/core18/1885/bin/mount
65 63 -rwsr-xr-x 1 root root 64424 Jun 28 2019 /snap/core18/1885/bin/ping
81 44 -rwsr-xr-x 1 root root 44664 Mar 22 2019 /snap/core18/1885/bin/su
99 27 -rwsr-xr-x 1 root root 26696 Mar 5 2020 /snap/core18/1885/bin/umount
1698 75 -rwsr-xr-x 1 root root 76496 Mar 22 2019 /snap/core18/1885/usr/bin/chfn
1700 44 -rwsr-xr-x 1 root root 44528 Mar 22 2019 /snap/core18/1885/usr/bin/chsh
1752 75 -rwsr-xr-x 1 root root 75824 Mar 22 2019 /snap/core18/1885/usr/bin/gpasswd
1816 40 -rwsr-xr-x 1 root root 40344 Mar 22 2019 /snap/core18/1885/usr/bin/newgrp
1828 59 -rwsr-xr-x 1 root root 59640 Mar 22 2019 /snap/core18/1885/usr/bin/passwd
1919 146 -rwsr-xr-x 1 root root 149080 Jan 31 2020 /snap/core18/1885/usr/bin/sudo
2006 42 -rwsr-xr-- 1 root systemd-resolve 42992 Jun 11 2020 /snap/core18/1885/usr/lib/dbus-1.0/dbus-daemon-launch-helper
2314 427 -rwsr-xr-x 1 root root 436552 Mar 4 2019 /snap/core18/1885/usr/lib/openssh/ssh-keysign
55 43 -rwsr-xr-x 1 root root 43088 Jan 8 2020 /snap/core18/1705/bin/mount
64 63 -rwsr-xr-x 1 root root 64424 Jun 28 2019 /snap/core18/1705/bin/ping
80 44 -rwsr-xr-x 1 root root 44664 Mar 22 2019 /snap/core18/1705/bin/su
98 27 -rwsr-xr-x 1 root root 26696 Jan 8 2020 /snap/core18/1705/bin/umount
1731 75 -rwsr-xr-x 1 root root 76496 Mar 22 2019 /snap/core18/1705/usr/bin/chfn
1733 44 -rwsr-xr-x 1 root root 44528 Mar 22 2019 /snap/core18/1705/usr/bin/chsh
1784 75 -rwsr-xr-x 1 root root 75824 Mar 22 2019 /snap/core18/1705/usr/bin/gpasswd
1848 40 -rwsr-xr-x 1 root root 40344 Mar 22 2019 /snap/core18/1705/usr/bin/newgrp
1860 59 -rwsr-xr-x 1 root root 59640 Mar 22 2019 /snap/core18/1705/usr/bin/passwd
1951 146 -rwsr-xr-x 1 root root 149080 Jan 31 2020 /snap/core18/1705/usr/bin/sudo
2038 42 -rwsr-xr-- 1 root systemd-resolve 42992 Jun 10 2019 /snap/core18/1705/usr/lib/dbus-1.0/dbus-daemon-launch-helper
2346 427 -rwsr-xr-x 1 root root 436552 Mar 4 2019 /snap/core18/1705/usr/lib/openssh/ssh-keysign
128 109 -rwsr-xr-x 1 root root 110792 Sep 30 2020 /snap/snapd/9607/usr/lib/snapd/snap-confine
128 109 -rwsr-xr-x 1 root root 110792 Sep 4 2020 /snap/snapd/9279/usr/lib/snapd/snap-confine
134452 52 -rwsr-xr-- 1 root messagebus 51344 Jun 11 2020 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
143662 464 -rwsr-xr-x 1 root root 473576 May 29 2020 /usr/lib/openssh/ssh-keysign
132429 16 -rwsr-xr-x 1 root root 14488 Jul 8 2019 /usr/lib/eject/dmcrypt-get-device
133403 128 -rwsr-xr-x 1 root root 130152 Jul 10 2020 /usr/lib/snapd/snap-confine
132644 24 -rwsr-xr-x 1 root root 22840 Aug 16 2019 /usr/lib/policykit-1/polkit-agent-helper-1
131890 44 -rwsr-xr-x 1 root root 44784 Apr 16 2020 /usr/bin/newgrp
131545 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
131248 164 -rwsr-xr-x 1 root root 166056 Jan 19 2021 /usr/bin/sudo
132215 40 -rwsr-xr-x 1 root root 39144 Apr 2 2020 /usr/bin/umount
131619 52 -rwsr-xr-x 1 root root 53040 Apr 16 2020 /usr/bin/chsh
131944 32 -rwsr-xr-x 1 root root 31032 Aug 16 2019 /usr/bin/pkexec
131876 56 -rwsr-xr-x 1 root root 55528 Apr 2 2020 /usr/bin/mount
131613 84 -rwsr-xr-x 1 root root 85064 Apr 16 2020 /usr/bin/chfn
131923 68 -rwsr-xr-x 1 root root 68208 Apr 16 2020 /usr/bin/passwd
131742 88 -rwsr-xr-x 1 root root 88464 Apr 16 2020 /usr/bin/gpasswd
132145 68 -rwsr-xr-x 1 root root 67816 Apr 2 2020 /usr/bin/su
131724 40 -rwsr-xr-x 1 root root 39144 Mar 7 2020 /usr/bin/fusermount
SGIDs
tomcat@ophiuchi:~$ find / -perm -02000 -ls -type f 2>/dev/null
301 0 drwxr-sr-x 3 root systemd-journal 60 mar 29 11:24 /run/log/journal
302 0 drwxr-s--- 2 root systemd-journal 80 mar 29 13:18 /run/log/journal/b6f84140bd5b4b2ab5e532ffc299367d
1631 34 -rwxr-sr-x 1 root shadow 34816 Feb 27 2019 /snap/core18/1885/sbin/pam_extrausers_chkpwd
1660 34 -rwxr-sr-x 1 root shadow 34816 Feb 27 2019 /snap/core18/1885/sbin/unix_chkpwd
1693 71 -rwxr-sr-x 1 root shadow 71816 Mar 22 2019 /snap/core18/1885/usr/bin/chage
1738 23 -rwxr-sr-x 1 root shadow 22808 Mar 22 2019 /snap/core18/1885/usr/bin/expiry
1912 355 -rwxr-sr-x 1 root crontab 362640 Mar 4 2019 /snap/core18/1885/usr/bin/ssh-agent
1976 31 -rwxr-sr-x 1 root tty 30800 Mar 5 2020 /snap/core18/1885/usr/bin/wall
10767 0 drwxrwsr-x 2 root mail 3 Jul 24 2020 /snap/core18/1885/var/mail
1664 34 -rwxr-sr-x 1 root shadow 34816 Feb 27 2019 /snap/core18/1705/sbin/pam_extrausers_chkpwd
1693 34 -rwxr-sr-x 1 root shadow 34816 Feb 27 2019 /snap/core18/1705/sbin/unix_chkpwd
1726 71 -rwxr-sr-x 1 root shadow 71816 Mar 22 2019 /snap/core18/1705/usr/bin/chage
1771 23 -rwxr-sr-x 1 root shadow 22808 Mar 22 2019 /snap/core18/1705/usr/bin/expiry
1944 355 -rwxr-sr-x 1 root crontab 362640 Mar 4 2019 /snap/core18/1705/usr/bin/ssh-agent
2008 31 -rwxr-sr-x 1 root tty 30800 Jan 8 2020 /snap/core18/1705/usr/bin/wall
10757 0 drwxrwsr-x 2 root mail 3 Mar 11 2020 /snap/core18/1705/var/mail
137712 4 drwxrwsr-x 3 root staff 4096 Apr 23 2020 /usr/local/lib/python3.8
137713 4 drwxrwsr-x 2 root staff 4096 Apr 23 2020 /usr/local/lib/python3.8/dist-packages
404461 4 drwxrwsr-x 2 root staff 4096 Oct 11 2020 /usr/local/share/fonts
267873 16 -rwxr-sr-x 1 root utmp 14648 Sep 30 2019 /usr/lib/x86_64-linux-gnu/utempter/utempter
138032 44 -rwxr-sr-x 1 root shadow 43168 Dec 17 2019 /usr/sbin/pam_extrausers_chkpwd
138079 44 -rwxr-sr-x 1 root shadow 43160 Dec 17 2019 /usr/sbin/unix_chkpwd
132257 36 -rwxr-sr-x 1 root tty 35048 Apr 2 2020 /usr/bin/wall
131545 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
131643 44 -rwxr-sr-x 1 root crontab 43720 Feb 13 2020 /usr/bin/crontab
143656 344 -rwxr-sr-x 1 root ssh 350504 May 29 2020 /usr/bin/ssh-agent
131706 32 -rwxr-sr-x 1 root shadow 31312 Apr 16 2020 /usr/bin/expiry
131608 84 -rwxr-sr-x 1 root shadow 84512 Apr 16 2020 /usr/bin/chage
131558 16 -rwxr-sr-x 1 root tty 14488 Mar 30 2020 /usr/bin/bsd-write
1048585 4 drwxrwsr-x 2 root staff 4096 Apr 15 2020 /var/local
1048587 4 drwxrwsr-x 2 root mail 4096 Apr 23 2020 /var/mail
Processes
tomcat@ophiuchi:~$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.2 101880 11224 ? Ss 11:24 0:02 /sbin/init auto automatic-ubiquity noprompt
root 445 0.0 0.4 37068 16296 ? S<s 11:24 0:03 /lib/systemd/systemd-journald
root 473 0.0 0.1 21356 5560 ? Ss 11:24 0:00 /lib/systemd/systemd-udevd
systemd+ 474 0.0 0.1 18544 7528 ? Ss 11:24 0:00 /lib/systemd/systemd-networkd
root 613 0.0 0.4 345796 18196 ? SLsl 11:24 0:09 /sbin/multipathd -d -s
systemd+ 641 0.0 0.3 24044 12252 ? Ss 11:24 0:02 /lib/systemd/systemd-resolved
systemd+ 642 0.0 0.1 90388 6332 ? Ssl 11:24 0:01 /lib/systemd/systemd-timesyncd
root 664 0.0 0.2 47516 10420 ? Ss 11:24 0:00 /usr/bin/VGAuthService
root 665 0.1 0.1 161976 7648 ? S<sl 11:24 0:18 /usr/bin/vmtoolsd
root 764 0.0 0.1 235664 7500 ? Ssl 11:24 0:00 /usr/lib/accountsservice/accounts-daemon
message+ 765 0.0 0.1 7408 4564 ? Ss 11:24 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root 772 0.0 0.0 81944 3744 ? Ssl 11:24 0:00 /usr/sbin/irqbalance --foreground
root 775 0.0 0.4 29016 18040 ? Ss 11:24 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
syslog 776 0.0 0.1 224324 4828 ? Ssl 11:24 0:00 /usr/sbin/rsyslogd -n -iNONE
root 779 0.0 0.7 776208 29760 ? Ssl 11:24 0:03 /usr/lib/snapd/snapd
root 781 0.0 0.1 16728 7680 ? Ss 11:24 0:00 /lib/systemd/systemd-logind
root 818 0.0 0.0 6812 2796 ? Ss 11:24 0:00 /usr/sbin/cron -f
daemon 827 0.0 0.0 3792 2288 ? Ss 11:24 0:00 /usr/sbin/atd -f
tomcat 837 0.2 4.8 3610256 195188 ? Sl 11:24 0:40 /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Djdk.tls.ephemeralDHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 -Xms512M -Xmx1024M -server -XX:+UseParallelGC -Dignore.endorsed.dirs= -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.io.tmpdir=/opt/tomcat/temp org.apache.catalina.startup.Bootstrap start
root 849 0.0 0.5 107868 21020 ? Ssl 11:24 0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
root 851 0.0 0.1 232700 6948 ? Ssl 11:24 0:00 /usr/lib/policykit-1/polkitd --no-debug
root 856 0.0 0.0 5828 1716 tty1 Ss+ 11:24 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root 860 0.0 0.1 12160 6856 ? Ss 11:24 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
tomcat 7383 0.0 0.0 9060 3532 pts/0 R+ 15:38 0:00 ps -auxwww
/usr/sbin/cron -f
/usr/lib/policykit-1/polkitd --no-debug
Cron & Systemd
tomcat@ophiuchi:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for tomcat
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED >
wed 2023-03-29 16:34:57 UTC 54min left Wed 2021-02-03 07:39:03 UTC 2 years 1 >
wed 2023-03-29 17:44:12 UTC 2h 3min left Wed 2021-02-03 10:33:29 UTC 2 years 1 >
wed 2023-03-29 22:14:11 UTC 6h left Wed 2021-02-03 09:30:47 UTC 2 years 1 >
thu 2023-03-30 00:00:00 UTC 8h left Wed 2023-03-29 11:24:40 UTC 4h 16min a>
thu 2023-03-30 00:00:00 UTC 8h left Wed 2023-03-29 11:24:40 UTC 4h 16min a>
thu 2023-03-30 06:01:33 UTC 14h left Wed 2023-03-29 11:38:33 UTC 4h 2min ag>
thu 2023-03-30 11:39:45 UTC 19h left Wed 2023-03-29 11:39:45 UTC 4h 1min ag>
sun 2023-04-02 03:10:02 UTC 3 days left Wed 2023-03-29 11:25:07 UTC 4h 15min a>
mon 2023-04-03 00:00:00 UTC 4 days left Wed 2023-03-29 11:24:40 UTC 4h 16min a>
9 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-13/13 (END)
Sudo Version
tomcat@ophiuchi:~$ sudo -V
Sudo version 1.8.31
Sudoers policy plugin version 1.8.31
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.31
Sudo version 1.8.31
Glibc Version
tomcat@ophiuchi:~$ ldd --version
ldd (Ubuntu GLIBC 2.31-0ubuntu9) 2.31
Copyright (C) 2020 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.
ldd (Ubuntu GLIBC 2.31-0ubuntu9) 2.31