System/Kernel
zabbix@shibboleth:/$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=a6cb40078351e05121d46daa768e271846d5cc54, for GNU/Linux 3.2.0, stripped
linux shibboleth 5.4.0-89-generic #100-ubuntu smp fri sep 24 14:50:10 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04.1 LTS"
NAME="Ubuntu"
VERSION="20.04.1 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.1 LTS"
VERSION_ID="20.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal
Ubuntu 20.04.1 LTS (Focal Fossa)
5.4.0-89-generic
x86_64
Networks
zabbix@shibboleth:/$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:10050 0.0.0.0:* LISTEN 956/zabbix_agentd
tcp 0 0 0.0.0.0:10051 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN -
tcp 0 0 10.10.11.124:40268 10.10.14.7:443 ESTABLISHED 17306/nc
tcp 0 301 10.10.11.124:34952 10.10.14.7:9999 ESTABLISHED 16974/nc
udp 0 0 127.0.0.1:35778 127.0.0.53:53 ESTABLISHED -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 127.0.0.1:161 0.0.0.0:* -
udp 0 0 10.10.11.124:45447 1.1.1.1:53 ESTABLISHED -
udp 0 0 0.0.0.0:623 0.0.0.0:* -
udp 0 0 10.10.11.124:45703 1.1.1.1:53 ESTABLISHED -
127.0.0.53:53
127.0.0.1:3306
Users & Groups
zabbix@shibboleth:/$ cat /etc/passwd ; ls -lasht /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:106::/nonexistent:/usr/sbin/nologin
syslog:x:104:110::/home/syslog:/usr/sbin/nologin
_apt:x:105:65534::/nonexistent:/usr/sbin/nologin
tss:x:106:112:TPM software stack,,,:/var/lib/tpm:/bin/false
landscape:x:108:114::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:109:1::/var/cache/pollinate:/bin/false
ipmi-svc:x:1000:1000:ipmi-svc,,,:/home/ipmi-svc:/bin/bash
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
zabbix:x:110:118::/var/lib/zabbix/:/usr/sbin/nologin
debian-snmp:x:111:119::/var/lib/snmp:/bin/false
mysql:x:112:120:MySQL Server,,,:/nonexistent:/bin/false
total 12K
4.0K drwxr-xr-x 19 root root 4.0K Oct 16 2021 ..
4.0K drwxr-xr-x 3 root root 4.0K Oct 16 2021 .
4.0K drwxr-xr-x 3 ipmi-svc ipmi-svc 4.0K Oct 16 2021 ipmi-svc
ipmi-svc
zabbix@shibboleth:/$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-network) gid=102(systemd-network) groups=102(systemd-network)
uid=101(systemd-resolve) gid=103(systemd-resolve) groups=103(systemd-resolve)
uid=102(systemd-timesync) gid=104(systemd-timesync) groups=104(systemd-timesync)
uid=103(messagebus) gid=106(messagebus) groups=106(messagebus)
uid=104(syslog) gid=110(syslog) groups=110(syslog),4(adm),5(tty)
uid=105(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=106(tss) gid=112(tss) groups=112(tss)
uid=108(landscape) gid=114(landscape) groups=114(landscape)
uid=109(pollinate) gid=1(daemon) groups=1(daemon)
uid=1000(ipmi-svc) gid=1000(ipmi-svc) groups=1000(ipmi-svc)
uid=999(systemd-coredump) gid=999(systemd-coredump) groups=999(systemd-coredump)
uid=110(zabbix) gid=118(zabbix) groups=118(zabbix)
uid=111(Debian-snmp) gid=119(Debian-snmp) groups=119(Debian-snmp)
uid=112(mysql) gid=120(mysql) groups=120(mysql)
SUIDs
zabbix@shibboleth:/$ finfind / -perm -04000 -ls -type f 2>/dev/null
13927 84 -rwsr-xr-x 1 root root 85064 Jul 14 2021 /usr/bin/chfn
2673 68 -rwsr-xr-x 1 root root 67816 Jul 21 2020 /usr/bin/su
12435 164 -rwsr-xr-x 1 root root 166056 Jan 19 2021 /usr/bin/sudo
4518 44 -rwsr-xr-x 1 root root 44784 Jul 14 2021 /usr/bin/newgrp
3917 40 -rwsr-xr-x 1 root root 39144 Jul 21 2020 /usr/bin/umount
3102 56 -rwsr-xr-x 1 root root 55528 Jul 21 2020 /usr/bin/mount
12294 40 -rwsr-xr-x 1 root root 39144 Mar 7 2020 /usr/bin/fusermount
13931 68 -rwsr-xr-x 1 root root 68208 Jul 14 2021 /usr/bin/passwd
13930 88 -rwsr-xr-x 1 root root 88464 Jul 14 2021 /usr/bin/gpasswd
12641 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
13928 52 -rwsr-xr-x 1 root root 53040 Jul 14 2021 /usr/bin/chsh
506 16 -rwsr-xr-x 1 root root 14488 Jul 8 2019 /usr/lib/eject/dmcrypt-get-device
12336 24 -rwsr-xr-x 1 root root 22840 May 26 2021 /usr/lib/policykit-1/polkit-agent-helper-1
496 52 -rwsr-xr-- 1 root messagebus 51344 Jun 11 2020 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
19353 128 -rwsr-xr-x 1 root root 130408 Sep 9 2021 /usr/lib/snapd/snap-confine
396037 464 -rwsr-xr-x 1 root root 473576 Jul 23 2021 /usr/lib/openssh/ssh-keysign
SGIDs
zabbix@shibboleth:/$ find / -perm -02000 -ls -type f 2>/dev/null
261695 4 drwxrwsr-x 2 root staff 4096 Apr 15 2020 /var/local
261705 4 drwxr-sr-x 3 root systemd-journal 4096 Apr 24 2021 /var/log/journal
271841 4 drwxr-sr-x 2 root systemd-journal 4096 apr 17 18:26 /var/log/journal/13612108a6894baca63a2e86f2062c0e
23284 4 drwxr-s--- 2 mysql adm 4096 Oct 16 2021 /var/log/mysql
261710 4 drwxrwsr-x 2 root mail 4096 Jul 31 2020 /var/mail
303 0 drwxr-sr-x 2 root systemd-journal 40 apr 17 18:26 /run/log/journal
13926 84 -rwxr-sr-x 1 root shadow 84512 Jul 14 2021 /usr/bin/chage
38500 36 -rwxr-sr-x 1 root tty 35048 Jul 21 2020 /usr/bin/wall
12971 344 -rwxr-sr-x 1 root ssh 350504 Jul 23 2021 /usr/bin/ssh-agent
13929 32 -rwxr-sr-x 1 root shadow 31312 Jul 14 2021 /usr/bin/expiry
76 44 -rwxr-sr-x 1 root crontab 43720 Feb 13 2020 /usr/bin/crontab
12641 56 -rwsr-sr-x 1 daemon daemon 55560 Nov 12 2018 /usr/bin/at
12680 16 -rwxr-sr-x 1 root utmp 14648 Sep 30 2019 /usr/lib/x86_64-linux-gnu/utempter/utempter
144881 4 drwxrwsr-x 2 root staff 4096 Apr 24 2021 /usr/local/share/fonts
3939 4 drwxrwsr-x 3 root staff 4096 Apr 24 2021 /usr/local/lib/python3.8
3940 4 drwxrwsr-x 2 root staff 4096 Jul 31 2020 /usr/local/lib/python3.8/dist-packages
2569 44 -rwxr-sr-x 1 root shadow 43168 Sep 17 2021 /usr/sbin/pam_extrausers_chkpwd
2574 44 -rwxr-sr-x 1 root shadow 43160 Sep 17 2021 /usr/sbin/unix_chkpwd
Processes
zabbix@shibboleth:/$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.2 102180 11572 ? Rs 18:26 0:06 /sbin/init
root 487 0.0 0.4 47888 16336 ? S<s 18:26 0:03 /lib/systemd/systemd-journald
root 511 0.1 0.1 18948 5480 ? Rs 18:26 0:07 /lib/systemd/systemd-udevd
root 630 0.0 0.4 345824 18220 ? SLsl 18:26 0:04 /sbin/multipathd -d -s
systemd+ 656 0.0 0.3 23896 12276 ? Ss 18:26 0:01 /lib/systemd/systemd-resolved
systemd+ 657 0.0 0.1 90228 6112 ? Ssl 18:26 0:00 /lib/systemd/systemd-timesyncd
root 661 0.0 0.0 2488 592 ? S 18:26 0:00 bpfilter_umh
root 668 0.0 0.2 50168 10472 ? Ss 18:26 0:00 /usr/bin/VGAuthService
root 669 0.1 0.2 240068 8256 ? Ssl 18:26 0:08 /usr/bin/vmtoolsd
root 696 0.0 0.4 31600 18212 ? Ss 18:26 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
syslog 701 0.0 0.1 224348 5444 ? Ssl 18:26 0:00 /usr/sbin/rsyslogd -n -iNONE
root 714 0.0 0.1 16476 5864 ? Ss 18:26 0:00 /lib/systemd/systemd-logind
root 837 0.0 0.0 9572 3436 ? Ss 18:26 0:00 /bin/bash /usr/local/bin/ayelow.sh
root 838 0.0 0.0 6052 3720 ? S 18:26 0:00 /usr/bin/ipmi_sim -n -c /etc/ayelow/ipmi_lan.conf -f /etc/ayelow/sim.emu
root 859 0.0 0.0 9412 3088 ? Ss 18:26 0:00 /usr/sbin/cron -f
root 953 0.0 0.6 218088 26280 ? Ss 18:26 0:00 /usr/sbin/apache2 -k start
zabbix 956 0.0 0.0 22772 3704 ? S 18:26 0:00 /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
root 985 0.0 0.0 8428 1836 tty1 Ss+ 18:26 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
www-data 1008 0.0 0.7 224752 29716 ? S 18:26 0:01 /usr/sbin/apache2 -k start
root 1033 0.0 0.0 2608 1700 ? S 18:26 0:00 /bin/sh /usr/bin/mysqld_safe
root 1183 0.7 3.4 1729180 138552 ? Sl 18:26 0:52 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/x86_64-linux-gnu/mariadb19/plugin --user=root --skip-log-error --pid-file=/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock
root 1184 0.0 0.0 10572 1076 ? S 18:26 0:00 logger -t mysqld -p daemon error
www-data 4463 0.0 0.8 224760 32552 ? S 18:46 0:01 /usr/sbin/apache2 -k start
www-data 10513 0.0 0.7 224716 31688 ? S 19:26 0:00 /usr/sbin/apache2 -k start
www-data 15517 0.0 0.6 224520 27260 ? S 20:01 0:00 /usr/sbin/apache2 -k start
/bin/bash /usr/local/bin/ayelow.sh
/usr/sbin/cron -f
Cron & Systemd
zabbix@shibboleth:/$ crontab -l ; cat /etc/crontab ; systemctl list-timers --all
no crontab for zabbix
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED UNIT ACTIVATES
mon 2023-04-17 22:22:12 BST 4s left Mon 2023-04-17 22:22:07 BST 480ms ago mysqlcheck.timer mysqlcheck.service
mon 2023-04-17 22:39:00 BST 16min left Mon 2023-04-17 22:09:07 BST 13min ago phpsessionclean.timer phpsessionclean.service
tue 2023-04-18 00:00:00 BST 1h 37min left Mon 2023-04-17 18:26:28 BST 3h 55min ago logrotate.timer logrotate.service
tue 2023-04-18 02:41:22 BST 4h 19min left Thu 2021-10-21 18:09:46 BST 1 years 5 months ago apt-daily.timer apt-daily.service
tue 2023-04-18 04:17:59 BST 5h 55min left Mon 2023-04-17 19:02:00 BST 3h 20min ago motd-news.timer motd-news.service
tue 2023-04-18 06:31:04 BST 8h left Mon 2023-04-17 19:08:28 BST 3h 13min ago apt-daily-upgrade.timer apt-daily-upgrade.service
tue 2023-04-18 06:56:42 BST 8h left Mon 2023-04-17 22:20:45 BST 1min 22s ago fwupd-refresh.timer fwupd-refresh.service
tue 2023-04-18 18:41:28 BST 20h left Mon 2023-04-17 18:41:28 BST 3h 40min ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
sun 2023-04-23 03:10:22 BST 5 days left Mon 2023-04-17 18:27:05 BST 3h 55min ago e2scrub_all.timer e2scrub_all.service
mon 2023-04-24 00:00:00 BST 6 days left Mon 2023-04-17 18:26:28 BST 3h 55min ago fstrim.timer fstrim.service
n/a n/a n/a n/a snapd.snap-repair.timer snapd.snap-repair.service
11 timers listed.
mysqlcheck.timer
Sudo Version
zabbix@shibboleth:/$ sudo -V
Sudo version 1.8.31
Sudoers policy plugin version 1.8.31
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.31
Sudo version 1.8.31
Glibc Version
zabbix@shibboleth:/$ ldd --version
ldd (Ubuntu GLIBC 2.31-0ubuntu9.2) 2.31
Copyright (C) 2020 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.
ldd (Ubuntu GLIBC 2.31-0ubuntu9.2) 2.31