System/Kernel


redis@postman:~$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, for GNU/Linux 3.2.0, BuildID[sha1]=12f73d7a8e226c663034529c8dd20efec22dde54, stripped
linux postman 4.15.0-58-generic #64-ubuntu smp tue aug 6 11:12:41 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.3 LTS"
NAME="Ubuntu"
VERSION="18.04.3 LTS (Bionic Beaver)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 18.04.3 LTS"
VERSION_ID="18.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=bionic
UBUNTU_CODENAME=bionic

Ubuntu 18.04.3 LTS (Bionic Beaver) 4.15.0-58-generic x86_64

Networks


redis@Postman:~$ arp -a ; netstat -antup4
_gateway (10.10.10.2) at 00:50:56:b9:d7:84 [ether] on ens33
 
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:6379            0.0.0.0:*               LISTEN      608/redis-server 0. 
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp        0    748 10.10.10.160:22         10.10.16.8:40686        ESTABLISHED -                   
udp        0      0 0.0.0.0:10000           0.0.0.0:*                           -                   
udp        0      0 127.0.0.53:53           0.0.0.0:*                           -                   

Users & Groups


redis@postman:~$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd/netif:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd/resolve:/usr/sbin/nologin
syslog:x:102:106::/home/syslog:/usr/sbin/nologin
messagebus:x:103:107::/nonexistent:/usr/sbin/nologin
_apt:x:104:65534::/nonexistent:/usr/sbin/nologin
uuidd:x:105:109::/run/uuidd:/usr/sbin/nologin
sshd:x:106:65534::/run/sshd:/usr/sbin/nologin
matt:x:1000:1000:,,,:/home/Matt:/bin/bash
redis:x:107:114::/var/lib/redis:/bin/bash
total 12K
4.0K drwxr-xr-x 22 root root 4.0K Sep 30  2020 ..
4.0K drwxr-xr-x  6 Matt Matt 4.0K Sep 11  2019 Matt
4.0K drwxr-xr-x  3 root root 4.0K Sep 11  2019 .

Matt

redis@postman:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(syslog) gid=106(syslog) groups=106(syslog),4(adm)
uid=103(messagebus) gid=107(messagebus) groups=107(messagebus)
uid=104(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=105(uuidd) gid=109(uuidd) groups=109(uuidd)
uid=106(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1000(Matt) gid=1000(Matt) groups=1000(Matt)
uid=107(redis) gid=114(redis) groups=114(redis)

SUIDs


redis@Postman:~$ find / -perm -04000 -ls -type f 2>/dev/null
   414083    428 -rwsr-xr-x   1 root     root       436552 Mar  4  2019 /usr/lib/openssh/ssh-keysign
   398798     12 -rwsr-xr-x   1 root     root        10232 Mar 28  2017 /usr/lib/eject/dmcrypt-get-device
   393999     44 -rwsr-xr--   1 root     messagebus    42992 Jun 10  2019 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
   400031    148 -rwsr-xr-x   1 root     root         149080 Jan 18  2018 /usr/bin/sudo
   398356     60 -rwsr-xr-x   1 root     root          59640 Mar 22  2019 /usr/bin/passwd
   394710     76 -rwsr-xr-x   1 root     root          75824 Mar 22  2019 /usr/bin/gpasswd
   394706     76 -rwsr-xr-x   1 root     root          76496 Mar 22  2019 /usr/bin/chfn
   413737     20 -rwsr-xr-x   1 root     root          18448 Jun 28  2019 /usr/bin/traceroute6.iputils
   393747     40 -rwsr-xr-x   1 root     root          40344 Mar 22  2019 /usr/bin/newgrp
   394707     44 -rwsr-xr-x   1 root     root          44528 Mar 22  2019 /usr/bin/chsh
   142388     32 -rwsr-xr-x   1 root     root          30800 Aug 11  2016 /bin/fusermount
   131179     28 -rwsr-xr-x   1 root     root          26696 Oct 15  2018 /bin/umount
   131243     44 -rwsr-xr-x   1 root     root          44664 Mar 22  2019 /bin/su
   131191     64 -rwsr-xr-x   1 root     root          64424 Jun 28  2019 /bin/ping
   131140     44 -rwsr-xr-x   1 root     root          43088 Oct 15  2018 /bin/mount

SGIDs


redis@postman:~$ find / -perm -02000 -ls -type f 2>/dev/null
   131169     36 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /sbin/pam_extrausers_chkpwd
   131175     36 -rwxr-sr-x   1 root     shadow      34816 Feb 27  2019 /sbin/unix_chkpwd
      598      0 drwxr-sr-x   2 redis    redis          60 oct  5 10:58 /run/redis
   394708     24 -rwxr-sr-x   1 root     shadow      22808 Mar 22  2019 /usr/bin/expiry
   398621     40 -rwxr-sr-x   1 root     crontab     39352 Nov 16  2017 /usr/bin/crontab
   414076    356 -rwxr-sr-x   1 root     ssh        362640 Mar  4  2019 /usr/bin/ssh-agent
   414055     44 -rwxr-sr-x   1 root     mlocate     43088 Mar  1  2018 /usr/bin/mlocate
   412261     16 -rwxr-sr-x   1 root     tty         14328 Jan 17  2018 /usr/bin/bsd-write
   393591     32 -rwxr-sr-x   1 root     tty         30800 Oct 15  2018 /usr/bin/wall
   393832     72 -rwxr-sr-x   1 root     shadow      71816 Mar 22  2019 /usr/bin/chage
   414308      4 drwxrwsr-x   3 root     staff        4096 Aug 24  2019 /usr/local/share/emacs
   414309      4 drwxrwsr-x   2 root     staff        4096 Aug 24  2019 /usr/local/share/emacs/site-lisp
   396463      4 drwxrwsr-x   3 root     staff        4096 Aug 24  2019 /usr/local/lib/python3.6
   396464      4 drwxrwsr-x   2 root     staff        4096 Aug 24  2019 /usr/local/lib/python3.6/dist-packages
   426030      4 drwxrwsr-x   4 root     staff        4096 Aug 25  2019 /usr/local/lib/python2.7
   426031      4 drwxrwsr-x   2 root     staff        4096 Aug 25  2019 /usr/local/lib/python2.7/dist-packages
   426040      4 drwxrwsr-x   2 root     staff        4096 Aug 25  2019 /usr/local/lib/python2.7/site-packages
   262870      4 drwxr-sr-x   3 root     systemd-journal     4096 Aug 24  2019 /var/log/journal
   262183      4 drwxr-sr-x   2 root     systemd-journal     4096 oct  5 10:58 /var/log/journal/2cb57e052840450f9a54b149b131d24d
   262423      4 drwxrwsr-x   2 root     mail                4096 Aug 24  2019 /var/mail
   262363      4 drwxrwsr-x   2 root     staff               4096 Apr 24  2018 /var/local

Processes


redis@Postman:~$ ps -auxwww
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          1  0.0  0.9 159340  8608 ?        Ss   10:58   0:01 /sbin/init splash
root        226  0.0  1.6  94864 15084 ?        S<s  10:58   0:00 /lib/systemd/systemd-journald
root        248  0.0  0.6  46920  5672 ?        Ss   10:58   0:00 /lib/systemd/systemd-udevd
systemd+    311  0.0  0.5  70628  5016 ?        Ss   10:58   0:00 /lib/systemd/systemd-resolved
systemd+    312  0.0  0.3 141928  3236 ?        Ssl  10:58   0:00 /lib/systemd/systemd-timesyncd
root        328  0.0  1.1  91152 10712 ?        Ss   10:58   0:00 /usr/bin/VGAuthService
root        329  0.1  0.8 153288  7476 ?        S<sl 10:58   0:03 /usr/bin/vmtoolsd
root        335  0.0  1.8 170344 17112 ?        Ssl  10:58   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root        341  0.0  0.3  31320  3200 ?        Ss   10:58   0:00 /usr/sbin/cron -f
syslog      342  0.0  0.5 263036  4692 ?        Ssl  10:58   0:00 /usr/sbin/rsyslogd -n
root        343  0.0  0.7 289844  7056 ?        Ssl  10:58   0:00 /usr/lib/accountsservice/accounts-daemon
root        344  0.0  0.6  70608  6044 ?        Ss   10:58   0:00 /lib/systemd/systemd-logind
message+    347  0.0  0.4  49928  4336 ?        Ss   10:58   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root        606  0.0  0.2  16180  1992 tty1     Ss+  10:58   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
redis       608  0.1  0.4  51576  4128 ?        Ssl  10:58   0:04 /usr/bin/redis-server 0.0.0.0:6379
root        609  0.0  0.6  72296  5612 ?        Ss   10:58   0:00 /usr/sbin/sshd -D
root        631  0.0  1.7 331332 16516 ?        Ss   10:58   0:00 /usr/sbin/apache2 -k start
www-data    638  0.0  0.9 335744  9048 ?        S    10:58   0:00 /usr/sbin/apache2 -k start
root        721  0.0  3.1  90944 28716 ?        Ss   10:58   0:00 /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
root        787  0.0  0.7 107984  7048 ?        Ss   11:02   0:00 sshd: redis [priv]
redis       789  0.0  0.7  76644  6928 ?        Ss   11:03   0:00 /lib/systemd/systemd --user
redis       790  0.0  0.2 193324  2136 ?        S    11:03   0:00 (sd-pam)
redis       838  0.0  0.5 108140  4624 ?        S    11:03   0:00 sshd: redis@pts/0
redis       841  0.0  0.5  22384  4696 pts/0    Ss   11:03   0:00 -bash
redis      1232  0.0  0.3  39664  3612 pts/0    R+   11:52   0:00 ps -auxwww

/usr/sbin/cron -f /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf

Cron & Systemd


redis@postman:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for redis
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# m h dom mon dow user	command
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT                         LEFT        LAST                         PASSED    UNIT                         ACTIVATES
thu 2023-10-05 12:09:00 BST  15min left  Thu 2023-10-05 11:39:00 BST  14min ago phpsessionclean.timer        phpsessionclean.service
thu 2023-10-05 18:46:14 BST  6h left     Thu 2023-10-05 10:58:21 BST  55min ago motd-news.timer              motd-news.service
fri 2023-10-06 01:11:45 BST  13h left    Thu 2023-10-05 10:58:21 BST  55min ago apt-daily.timer              apt-daily.service
fri 2023-10-06 06:16:43 BST  18h left    Thu 2023-10-05 10:58:21 BST  55min ago apt-daily-upgrade.timer      apt-daily-upgrade.service
fri 2023-10-06 11:13:29 BST  23h left    Thu 2023-10-05 11:13:29 BST  40min ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.serv
mon 2023-10-09 00:00:00 BST  3 days left Thu 2023-10-05 10:58:21 BST  55min ago fstrim.timer                 fstrim.service
 
6 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-10/10 (END)

Sudo Version


redis@Postman:~$ sudo --version
Sudo version 1.8.21p2
Sudoers policy plugin version 1.8.21p2
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.21p2
redis@Postman:~$ ldd --version

Sudo version 1.8.21p2

Glibc Version


redis@postman:~$ ldd --version
ldd (Ubuntu GLIBC 2.27-3ubuntu1) 2.27
Copyright (C) 2018 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.27-3ubuntu1) 2.27