System/Kernel


daniel@pandora:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=a6cb40078351e05121d46daa768e271846d5cc54, for GNU/Linux 3.2.0, stripped
linux pandora 5.4.0-91-generic #102-ubuntu smp fri nov 5 16:31:28 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04.3 LTS"
NAME="Ubuntu"
VERSION="20.04.3 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.3 LTS"
VERSION_ID="20.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal

Ubuntu 20.04.3 LTS (Focal Fossa) 5.4.0-91-generic x86_64

Networks


daniel@pandora:~$ netstat -antup4
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      -                   
tcp        0    612 10.10.11.136:22         10.10.14.2:45640        ESTABLISHED -                   
tcp        0      1 10.10.11.136:52630      1.1.1.1:53              SYN_SENT    -                   
udp        0      0 127.0.0.53:53           0.0.0.0:*                           -                   
udp        0      0 0.0.0.0:161             0.0.0.0:*                           -                   
udp        0      0 127.0.0.1:43498         127.0.0.53:53           ESTABLISHED -                   

127.0.0.53:53 127.0.0.1:3306

Users & Groups


daniel@pandora:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:106::/nonexistent:/usr/sbin/nologin
syslog:x:104:110::/home/syslog:/usr/sbin/nologin
_apt:x:105:65534::/nonexistent:/usr/sbin/nologin
tss:x:106:111:TPM software stack,,,:/var/lib/tpm:/bin/false
uuidd:x:107:112::/run/uuidd:/usr/sbin/nologin
tcpdump:x:108:113::/nonexistent:/usr/sbin/nologin
landscape:x:109:115::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:110:1::/var/cache/pollinate:/bin/false
usbmux:x:111:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
sshd:x:112:65534::/run/sshd:/usr/sbin/nologin
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
matt:x:1000:1000:matt:/home/matt:/bin/bash
lxd:x:998:100::/var/snap/lxd/common/lxd:/bin/false
debian-snmp:x:113:117::/var/lib/snmp:/bin/false
mysql:x:114:119:MySQL Server,,,:/nonexistent:/bin/false
daniel:x:1001:1001::/home/daniel:/bin/bash
total 16
drwxr-xr-x  4 root   root   4096 Dec  7  2021 ./
drwxr-xr-x 18 root   root   4096 Dec  7  2021 ../
drwxr-xr-x  4 daniel daniel 4096 apr 20 08:26 daniel/
drwxr-xr-x  2 matt   matt   4096 Dec  7  2021 matt/

matt

daniel@pandora:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(systemd-timesync) gid=104(systemd-timesync) groups=104(systemd-timesync)
uid=103(messagebus) gid=106(messagebus) groups=106(messagebus)
uid=104(syslog) gid=110(syslog) groups=110(syslog),4(adm),5(tty)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(tss) gid=111(tss) groups=111(tss)
uid=107(uuidd) gid=112(uuidd) groups=112(uuidd)
uid=108(tcpdump) gid=113(tcpdump) groups=113(tcpdump)
uid=109(landscape) gid=115(landscape) groups=115(landscape)
uid=110(pollinate) gid=1(daemon) groups=1(daemon)
uid=111(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=112(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=1000(matt) gid=1000(matt) groups=1000(matt)
uid=998(lxd) gid=100(users) groups=100(users)
uid=113(Debian-snmp) gid=117(Debian-snmp) groups=117(Debian-snmp)
uid=114(mysql) gid=119(mysql) groups=119(mysql)
uid=1001(daniel) gid=1001(daniel) groups=1001(daniel)

SUIDs


daniel@pandora:~$ find / -perm -04000 -ls -type f 2>/dev/null
   264644    164 -rwsr-xr-x   1 root     root       166056 Jan 19  2021 /usr/bin/sudo
   265010     32 -rwsr-xr-x   1 root     root        31032 May 26  2021 /usr/bin/pkexec
   267386     84 -rwsr-xr-x   1 root     root        85064 Jul 14  2021 /usr/bin/chfn
   262764     44 -rwsr-xr-x   1 root     root        44784 Jul 14  2021 /usr/bin/newgrp
   267389     88 -rwsr-xr-x   1 root     root        88464 Jul 14  2021 /usr/bin/gpasswd
   264713     40 -rwsr-xr-x   1 root     root        39144 Jul 21  2020 /usr/bin/umount
   262929     20 -rwsr-x---   1 root     matt        16816 Dec  3  2021 /usr/bin/pandora_backup
   267390     68 -rwsr-xr-x   1 root     root        68208 Jul 14  2021 /usr/bin/passwd
   264371     56 -rwsr-xr-x   1 root     root        55528 Jul 21  2020 /usr/bin/mount
   264643     68 -rwsr-xr-x   1 root     root        67816 Jul 21  2020 /usr/bin/su
   264040     56 -rwsr-sr-x   1 daemon   daemon      55560 Nov 12  2018 /usr/bin/at
   264219     40 -rwsr-xr-x   1 root     root        39144 Mar  7  2020 /usr/bin/fusermount
   267387     52 -rwsr-xr-x   1 root     root        53040 Jul 14  2021 /usr/bin/chsh
   262815    464 -rwsr-xr-x   1 root     root       473576 Jul 23  2021 /usr/lib/openssh/ssh-keysign
   264920     52 -rwsr-xr--   1 root     messagebus    51344 Jun 11  2020 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
   264927     16 -rwsr-xr-x   1 root     root          14488 Jul  8  2019 /usr/lib/eject/dmcrypt-get-device
   266611     24 -rwsr-xr-x   1 root     root          22840 May 26  2021 /usr/lib/policykit-1/polkit-agent-helper-1

/usr/bin/pandora_backup

SGIDs


daniel@pandora:~$ find / -perm -02000 -ls -type f 2>/dev/null
      358      0 drwxr-sr-x   2 root     systemd-journal       40 apr 20 07:53 /run/log/journal
   264053     16 -rwxr-sr-x   1 root     tty                14488 Mar 30  2020 /usr/bin/bsd-write
   262703    344 -rwxr-sr-x   1 root     ssh               350504 Jul 23  2021 /usr/bin/ssh-agent
   267385     84 -rwxr-sr-x   1 root     shadow             84512 Jul 14  2021 /usr/bin/chage
   264138     44 -rwxr-sr-x   1 root     crontab            43720 Feb 13  2020 /usr/bin/crontab
   267388     32 -rwxr-sr-x   1 root     shadow             31312 Jul 14  2021 /usr/bin/expiry
   264040     56 -rwsr-sr-x   1 daemon   daemon             55560 Nov 12  2018 /usr/bin/at
   264755     36 -rwxr-sr-x   1 root     tty                35048 Jul 21  2020 /usr/bin/wall
     7173     16 -rwxr-sr-x   1 root     utmp               14648 Sep 30  2019 /usr/lib/x86_64-linux-gnu/utempter/utempter
   263779     44 -rwxr-sr-x   1 root     shadow             43168 Sep 17  2021 /usr/sbin/pam_extrausers_chkpwd
   263901     44 -rwxr-sr-x   1 root     shadow             43160 Sep 17  2021 /usr/sbin/unix_chkpwd
   269259      4 drwxrwsr-x   3 root     staff               4096 Feb  1  2021 /usr/local/lib/python3.8
   269260      4 drwxrwsr-x   2 root     staff               4096 Feb  1  2021 /usr/local/lib/python3.8/dist-packages
   286921      4 drwxrwsr-x   2 root     staff               4096 Jun 11  2021 /usr/local/share/fonts
    64584      4 drwxr-s---   2 mysql    adm                 4096 apr 20 07:54 /var/log/mysql
    50250      4 drwxr-sr-x   3 root     systemd-journal     4096 Dec  7  2021 /var/log/journal
    51952      4 drwxr-sr-x   2 root     systemd-journal     4096 apr 20 08:26 /var/log/journal/8f30e8bf6a5741819a9c227e2c2ac617
    49853      4 drwxrwsr-x   2 root     mail                4096 Dec  7  2021 /var/mail
    49851      4 drwxrwsr-x   2 root     staff               4096 Dec  7  2021 /var/local

Processes


daniel@pandora:~$ ps -auxwww
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           1  0.1  0.2 104344 11444 ?        Ss   07:53   0:03 /sbin/init maybe-ubiquity
root         489  0.0  0.3  67876 15968 ?        S<s  07:53   0:00 /lib/systemd/systemd-journald
root         517  0.0  0.1  21524  5744 ?        Ss   07:53   0:00 /lib/systemd/systemd-udevd
systemd+     526  0.0  0.1  18408  7444 ?        Ss   07:53   0:00 /lib/systemd/systemd-networkd
root         666  0.0  0.4 214600 17940 ?        SLsl 07:53   0:00 /sbin/multipathd -d -s
systemd+     689  0.0  0.3  23896 12324 ?        Ss   07:53   0:00 /lib/systemd/systemd-resolved
systemd+     693  0.0  0.1  90228  6036 ?        Ssl  07:53   0:00 /lib/systemd/systemd-timesyncd
root         711  0.0  0.2  47540 10580 ?        Ss   07:53   0:00 /usr/bin/VGAuthService
root         713  0.1  0.2 237764  8516 ?        Ssl  07:53   0:02 /usr/bin/vmtoolsd
root         762  0.0  0.2 239280  9288 ?        Ssl  07:53   0:00 /usr/lib/accountsservice/accounts-daemon
message+     763  0.0  0.1   7628  4540 ?        Ss   07:53   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root         776  0.0  0.0  81960  3696 ?        Ssl  07:53   0:00 /usr/sbin/irqbalance --foreground
root         780  0.0  0.4  29080 18172 ?        Ss   07:53   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
syslog       781  0.0  0.1 224348  5280 ?        Ssl  07:53   0:00 /usr/sbin/rsyslogd -n -iNONE
root         782  0.0  0.1  16692  7480 ?        Ss   07:53   0:00 /lib/systemd/systemd-logind
root         783  0.0  0.3 394916 13780 ?        Ssl  07:53   0:00 /usr/lib/udisks2/udisksd
root         815  0.0  0.0   6812  2936 ?        Ss   07:53   0:00 /usr/sbin/cron -f
root         816  0.0  0.0   8352  3452 ?        S    07:53   0:00 /usr/sbin/CRON -f
root         831  0.0  0.0   2608   608 ?        Ss   07:53   0:00 /bin/sh -c sleep 30; /bin/bash -c '/usr/bin/host_check -u daniel -p HotelBabylon23'
daemon       839  0.0  0.0   3792  2192 ?        Ss   07:53   0:00 /usr/sbin/atd -f
Debian-+     846  0.2  0.3  22888 13324 ?        Ss   07:53   0:04 /usr/sbin/snmpd -LOw -u Debian-snmp -g Debian-snmp -I -smux mteTrigger mteTriggerConf -f -p /run/snmpd.pid
root         847  0.0  0.7 228068 31364 ?        Ss   07:53   0:01 /usr/sbin/apache2 -k start
root         850  0.0  0.1  12176  7292 ?        Ss   07:53   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root         889  0.0  0.0   5828  1844 tty1     Ss+  07:53   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root         907  0.0  0.2 236420  9136 ?        Ssl  07:53   0:00 /usr/lib/policykit-1/polkitd --no-debug
mysql       1000  0.0  2.3 1710488 94048 ?       Ssl  07:54   0:02 /usr/sbin/mysqld
root        1139  0.0  0.0   2488  1352 ?        S    07:54   0:00 /usr/bin/host_check -u daniel -p HotelBabylon23
www-data    1564  0.0  0.3 228500 14692 ?        S    08:04   0:00 /usr/sbin/apache2 -k start
root        9310  0.0  0.2  13956  9092 ?        Ss   08:26   0:00 sshd: daniel [priv]
daniel      9390  0.0  0.2  18404  9520 ?        Ss   08:26   0:00 /lib/systemd/systemd --user
daniel      9513  0.0  0.1  13956  5916 ?        S    08:26   0:00 sshd: daniel@pts/0
daniel      9516  0.0  0.1   8272  5120 pts/0    Ss   08:26   0:00 -bash
daniel     10487  0.0  0.0   9084  3584 pts/0    R+   08:33   0:00 ps -auxwww

/usr/sbin/cron -f /usr/lib/policykit-1/polkitd --no-debug /usr/bin/host_check -u daniel -p HotelBabylon23

Cron & Systemd


daniel@pandora:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for daniel
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# example of job definition:
# .---------------- minute (0 - 59)
# |  .------------- hour (0 - 23)
# |  |  .---------- day of month (1 - 31)
# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...
# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# |  |  |  |  |
# *  *  *  *  * user-name command to be executed
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT                        LEFT          LAST                        PASSED               UNIT                         ACTIVATES      >
thu 2023-04-20 08:39:00 UTC 3min 35s left Thu 2023-04-20 08:09:00 UTC 26min ago            phpsessionclean.timer        phpsessionclean>
thu 2023-04-20 12:18:30 UTC 3h 43min left Tue 2021-12-07 10:10:22 UTC 1 years 4 months ago motd-news.timer              motd-news.servi>
thu 2023-04-20 14:37:50 UTC 6h left       Thu 2023-04-20 08:11:59 UTC 23min ago            ua-timer.timer               ua-timer.servic>
thu 2023-04-20 16:06:58 UTC 7h left       Tue 2021-12-07 00:27:28 UTC 1 years 4 months ago fwupd-refresh.timer          fwupd-refresh.s>
thu 2023-04-20 19:43:27 UTC 11h left      Tue 2021-12-07 11:30:34 UTC 1 years 4 months ago apt-daily.timer              apt-daily.servi>
fri 2023-04-21 00:00:00 UTC 15h left      Thu 2023-04-20 07:53:58 UTC 41min ago            logrotate.timer              logrotate.servi>
fri 2023-04-21 00:00:00 UTC 15h left      Thu 2023-04-20 07:53:58 UTC 41min ago            man-db.timer                 man-db.service >
fri 2023-04-21 06:21:14 UTC 21h left      Thu 2023-04-20 08:17:10 UTC 18min ago            apt-daily-upgrade.timer      apt-daily-upgra>
fri 2023-04-21 08:08:48 UTC 23h left      Thu 2023-04-20 08:08:48 UTC 26min ago            systemd-tmpfiles-clean.timer systemd-tmpfile>
sun 2023-04-23 03:10:15 UTC 2 days left   Thu 2023-04-20 07:54:18 UTC 41min ago            e2scrub_all.timer            e2scrub_all.ser>
mon 2023-04-24 00:00:00 UTC 3 days left   Thu 2023-04-20 07:53:58 UTC 41min ago            fstrim.timer                 fstrim.service >
 
11 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-15/15 (END)

Sudo Version


daniel@pandora:~$ sudo -V
Sudo version 1.8.31
Sudoers policy plugin version 1.8.31
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.31

Sudo version 1.8.31

Glibc Version


daniel@pandora:~$ ldd --version
ldd (Ubuntu GLIBC 2.31-0ubuntu9.2) 2.31
Copyright (C) 2020 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.31-0ubuntu9.2) 2.31