System/Kernel


pericles@time:/var/www/html$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=a43fec47192ff49c2d3fed671f2be8df7e83784a, for GNU/Linux 3.2.0, stripped
linux time 5.4.0-52-generic #57-ubuntu smp thu oct 15 10:57:00 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=20.04
DISTRIB_CODENAME=focal
DISTRIB_DESCRIPTION="Ubuntu 20.04 LTS"
NAME="Ubuntu"
VERSION="20.04 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04 LTS"
VERSION_ID="20.04"
home_url="https://www.ubuntu.com/"
support_url="https://help.ubuntu.com/"
bug_report_url="https://bugs.launchpad.net/ubuntu/"
privacy_policy_url="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal

5.4.0-52-generic Ubuntu 20.04 LTS (Focal Fossa) x86_64

Networks


pericles@time:/var/www/html$ netstat -antup4
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp        0     17 10.10.10.214:57724      10.10.14.7:9999         ESTABLISHED 27814/nc            
udp        0      0 127.0.0.53:53           0.0.0.0:*                           -                   

127.0.0.53:53

Users & Groups


pericles@time:/var/www/html$ cat /etc/passwd ; ll /home
cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:100:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
systemd-timesync:x:102:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
messagebus:x:103:106::/nonexistent:/usr/sbin/nologin
syslog:x:104:110::/home/syslog:/usr/sbin/nologin
_apt:x:105:65534::/nonexistent:/usr/sbin/nologin
tss:x:106:111:TPM software stack,,,:/var/lib/tpm:/bin/false
uuidd:x:107:112::/run/uuidd:/usr/sbin/nologin
tcpdump:x:108:113::/nonexistent:/usr/sbin/nologin
landscape:x:109:115::/var/lib/landscape:/usr/sbin/nologin
pollinate:x:110:1::/var/cache/pollinate:/bin/false
sshd:x:111:65534::/run/sshd:/usr/sbin/nologin
systemd-coredump:x:999:999:systemd Core Dumper:/:/usr/sbin/nologin
pericles:x:1000:1000:Pericles:/home/pericles:/bin/bash
lxd:x:998:100::/var/snap/lxd/common/lxd:/bin/false
mysql:x:112:118:MySQL Server,,,:/nonexistent:/bin/false
total 12K
4.0k drwxr-xr-x 20 root     root     4.0k mar 21 13:45 ..
4.0K drwxr-xr-x  7 pericles pericles 4.0K Dec 16  2021 pericles
4.0K drwxr-xr-x  3 root     root     4.0K Dec 16  2021 .

SUIDs


pericles@time:/var/www/html$ find / -perm -04000 -ls -type f 2>/dev/null
find / -perm -04000 -ls -type f 2>/dev/null
    84575     24 -rwsr-xr-x   1 root     root        22840 Aug 16  2019 /usr/lib/policykit-1/polkit-agent-helper-1
    95510    464 -rwsr-xr-x   1 root     root       473576 May 29  2020 /usr/lib/openssh/ssh-keysign
    89732    128 -rwsr-xr-x   1 root     root       130152 Jul 10  2020 /usr/lib/snapd/snap-confine
    84260     52 -rwsr-xr--   1 root     messagebus    51344 Jun 11  2020 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
    84360     16 -rwsr-xr-x   1 root     root          14488 Jul  8  2019 /usr/lib/eject/dmcrypt-get-device
    83480     56 -rwsr-sr-x   1 daemon   daemon        55560 Nov 12  2018 /usr/bin/at
    83658     40 -rwsr-xr-x   1 root     root          39144 Mar  7  2020 /usr/bin/fusermount
    83548     84 -rwsr-xr-x   1 root     root          85064 Apr 16  2020 /usr/bin/chfn
    83878     32 -rwsr-xr-x   1 root     root          31032 Aug 16  2019 /usr/bin/pkexec
    83810     56 -rwsr-xr-x   1 root     root          55528 Apr  2  2020 /usr/bin/mount
    83430    164 -rwsr-xr-x   1 root     root         166056 Jan 19  2021 /usr/bin/sudo
    84079     68 -rwsr-xr-x   1 root     root          67816 Apr  2  2020 /usr/bin/su
    83676     88 -rwsr-xr-x   1 root     root          88464 Apr 16  2020 /usr/bin/gpasswd
    84147     40 -rwsr-xr-x   1 root     root          39144 Apr  2  2020 /usr/bin/umount
    83554     52 -rwsr-xr-x   1 root     root          53040 Apr 16  2020 /usr/bin/chsh
    83857     68 -rwsr-xr-x   1 root     root          68208 Apr 16  2020 /usr/bin/passwd
    83824     44 -rwsr-xr-x   1 root     root          44784 Apr 16  2020 /usr/bin/newgrp
      128    109 -rwsr-xr-x   1 root     root         110792 Oct  8  2020 /snap/snapd/9721/usr/lib/snapd/snap-confine
      128    109 -rwsr-xr-x   1 root     root         110792 Sep 30  2020 /snap/snapd/9607/usr/lib/snapd/snap-confine
       55     43 -rwsr-xr-x   1 root     root          43088 Jan  8  2020 /snap/core18/1705/bin/mount
       64     63 -rwsr-xr-x   1 root     root          64424 Jun 28  2019 /snap/core18/1705/bin/ping
       80     44 -rwsr-xr-x   1 root     root          44664 Mar 22  2019 /snap/core18/1705/bin/su
       98     27 -rwsr-xr-x   1 root     root          26696 Jan  8  2020 /snap/core18/1705/bin/umount
     1731     75 -rwsr-xr-x   1 root     root          76496 Mar 22  2019 /snap/core18/1705/usr/bin/chfn
     1733     44 -rwsr-xr-x   1 root     root          44528 Mar 22  2019 /snap/core18/1705/usr/bin/chsh
     1784     75 -rwsr-xr-x   1 root     root          75824 Mar 22  2019 /snap/core18/1705/usr/bin/gpasswd
     1848     40 -rwsr-xr-x   1 root     root          40344 Mar 22  2019 /snap/core18/1705/usr/bin/newgrp
     1860     59 -rwsr-xr-x   1 root     root          59640 Mar 22  2019 /snap/core18/1705/usr/bin/passwd
     1951    146 -rwsr-xr-x   1 root     root         149080 Jan 31  2020 /snap/core18/1705/usr/bin/sudo
     2038     42 -rwsr-xr--   1 root     systemd-resolve    42992 Jun 10  2019 /snap/core18/1705/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     2346    427 -rwsr-xr-x   1 root     root              436552 Mar  4  2019 /snap/core18/1705/usr/lib/openssh/ssh-keysign
       56     43 -rwsr-xr-x   1 root     root               43088 Mar  5  2020 /snap/core18/1885/bin/mount
       65     63 -rwsr-xr-x   1 root     root               64424 Jun 28  2019 /snap/core18/1885/bin/ping
       81     44 -rwsr-xr-x   1 root     root               44664 Mar 22  2019 /snap/core18/1885/bin/su
       99     27 -rwsr-xr-x   1 root     root               26696 Mar  5  2020 /snap/core18/1885/bin/umount
     1698     75 -rwsr-xr-x   1 root     root               76496 Mar 22  2019 /snap/core18/1885/usr/bin/chfn
     1700     44 -rwsr-xr-x   1 root     root               44528 Mar 22  2019 /snap/core18/1885/usr/bin/chsh
     1752     75 -rwsr-xr-x   1 root     root               75824 Mar 22  2019 /snap/core18/1885/usr/bin/gpasswd
     1816     40 -rwsr-xr-x   1 root     root               40344 Mar 22  2019 /snap/core18/1885/usr/bin/newgrp
     1828     59 -rwsr-xr-x   1 root     root               59640 Mar 22  2019 /snap/core18/1885/usr/bin/passwd
     1919    146 -rwsr-xr-x   1 root     root              149080 Jan 31  2020 /snap/core18/1885/usr/bin/sudo
     2006     42 -rwsr-xr--   1 root     systemd-resolve    42992 Jun 11  2020 /snap/core18/1885/usr/lib/dbus-1.0/dbus-daemon-launch-helper
     2314    427 -rwsr-xr-x   1 root     root              436552 Mar  4  2019 /snap/core18/1885/usr/lib/openssh/ssh-keysign

SGIDs


pericles@time:/var/www/html$ find / -perm -02000 -ls -type f 2>/dev/null
find / -perm -02000 -ls -type f 2>/dev/null
      307      0 drwxr-sr-x   2 root     systemd-journal       40 mar 21 11:10 /run/log/journal
   108490     16 -rwxr-sr-x   1 root     utmp               14648 Sep 30  2019 /usr/lib/x86_64-linux-gnu/utempter/utempter
    83480     56 -rwsr-sr-x   1 daemon   daemon             55560 Nov 12  2018 /usr/bin/at
    95504    344 -rwxr-sr-x   1 root     ssh               350504 May 29  2020 /usr/bin/ssh-agent
    83640     32 -rwxr-sr-x   1 root     shadow             31312 Apr 16  2020 /usr/bin/expiry
    83578     44 -rwxr-sr-x   1 root     crontab            43720 Feb 13  2020 /usr/bin/crontab
    83543     84 -rwxr-sr-x   1 root     shadow             84512 Apr 16  2020 /usr/bin/chage
    83493     16 -rwxr-sr-x   1 root     tty                14488 Mar 30  2020 /usr/bin/bsd-write
    84189     36 -rwxr-sr-x   1 root     tty                35048 Apr  2  2020 /usr/bin/wall
    89561      4 drwxrwsr-x   3 root     staff               4096 Dec 16  2021 /usr/local/lib/python3.8
    89562      4 drwxrwsr-x   3 root     staff               4096 Dec 16  2021 /usr/local/lib/python3.8/dist-packages
    89076      4 drwxr-sr-x   2 root     staff               4096 Dec 16  2021 /usr/local/lib/python3.8/dist-packages/lshell
   100446      4 drwxrwsr-x   2 root     staff               4096 Dec 16  2021 /usr/local/share/fonts
    89928     44 -rwxr-sr-x   1 root     shadow             43160 Dec 17  2019 /usr/sbin/unix_chkpwd
    89881     44 -rwxr-sr-x   1 root     shadow             43168 Dec 17  2019 /usr/sbin/pam_extrausers_chkpwd
    71277      4 drwxr-sr-x   3 root     systemd-journal     4096 Dec 16  2021 /var/log/journal
    73518      4 drwxr-sr-x   2 root     systemd-journal     4096 mar 21 13:19 /var/log/journal/151d23267a7548479f1d63a9000ddfb3
    70980      4 drwxrwsr-x   2 root     staff               4096 Dec 16  2021 /var/local
    70982      4 drwxrwsr-x   2 root     mail                4096 Dec 16  2021 /var/mail
     1664     34 -rwxr-sr-x   1 root     shadow             34816 Feb 27  2019 /snap/core18/1705/sbin/pam_extrausers_chkpwd
     1693     34 -rwxr-sr-x   1 root     shadow             34816 Feb 27  2019 /snap/core18/1705/sbin/unix_chkpwd
     1726     71 -rwxr-sr-x   1 root     shadow             71816 Mar 22  2019 /snap/core18/1705/usr/bin/chage
     1771     23 -rwxr-sr-x   1 root     shadow             22808 Mar 22  2019 /snap/core18/1705/usr/bin/expiry
     1944    355 -rwxr-sr-x   1 root     crontab           362640 Mar  4  2019 /snap/core18/1705/usr/bin/ssh-agent
     2008     31 -rwxr-sr-x   1 root     tty                30800 Jan  8  2020 /snap/core18/1705/usr/bin/wall
    10757      0 drwxrwsr-x   2 root     mail                   3 Mar 11  2020 /snap/core18/1705/var/mail
     1631     34 -rwxr-sr-x   1 root     shadow             34816 Feb 27  2019 /snap/core18/1885/sbin/pam_extrausers_chkpwd
     1660     34 -rwxr-sr-x   1 root     shadow             34816 Feb 27  2019 /snap/core18/1885/sbin/unix_chkpwd
     1693     71 -rwxr-sr-x   1 root     shadow             71816 Mar 22  2019 /snap/core18/1885/usr/bin/chage
     1738     23 -rwxr-sr-x   1 root     shadow             22808 Mar 22  2019 /snap/core18/1885/usr/bin/expiry
     1912    355 -rwxr-sr-x   1 root     crontab           362640 Mar  4  2019 /snap/core18/1885/usr/bin/ssh-agent
     1976     31 -rwxr-sr-x   1 root     tty                30800 Mar  5  2020 /snap/core18/1885/usr/bin/wall
    10767      0 drwxrwsr-x   2 root     mail                   3 Jul 24  2020 /snap/core18/1885/var/mail

Processes


pericles@time:/var/www/html$ ps -auxwww | grep -i 'root' --color=auto
ps -auxwww | grep -i 'root' --color=auto
root           1  0.1  0.2 104008 11748 ?        Ss   11:10   0:15 /sbin/init auto automatic-ubiquity noprompt
root         446  0.3  3.4 273404 138488 ?       S<s  11:10   0:33 /lib/systemd/systemd-journald
root         474  0.1  0.1  21612  5676 ?        Ss   11:10   0:13 /lib/systemd/systemd-udevd
root         615  0.0  0.4 345860 18248 ?        SLsl 11:10   0:04 /sbin/multipathd -d -s
root         668  0.0  0.2  47524 10624 ?        Ss   11:10   0:00 /usr/bin/VGAuthService
root         670  0.1  0.1 161980  7584 ?        S<sl 11:10   0:11 /usr/bin/vmtoolsd
root         770  0.0  0.2 239372  9440 ?        Ssl  11:10   0:01 /usr/lib/accountsservice/accounts-daemon
root         790  0.0  0.0  81944  3788 ?        Ssl  11:10   0:00 /usr/sbin/irqbalance --foreground
root         798  0.0  0.4  29052 18052 ?        Ss   11:10   0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
root         802  0.2  0.9 855224 37000 ?        Ssl  11:10   0:25 /usr/lib/snapd/snapd
root         814  0.0  0.1  16632  6188 ?        Ss   11:10   0:00 /lib/systemd/systemd-logind
root         873  0.0  0.0   6812  3060 ?        Ss   11:10   0:00 /usr/sbin/cron -f
root         906  0.0  0.1  12160  7468 ?        Ss   11:10   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root         928  0.0  0.2 236292  8984 ?        Ssl  11:10   0:00 /usr/lib/policykit-1/polkitd --no-debug
root         934  0.0  0.0   5828  1848 tty1     Ss+  11:10   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
root         939  0.0  0.4 194040 18384 ?        Ss   11:10   0:00 /usr/sbin/apache2 -k start
root       28384  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28385  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28386  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28387  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28388  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28389  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28390  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28391  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28392  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28393  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28394  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28395  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28396  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28397  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28398  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28399  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28401  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28402  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28404  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
root       28405  0.0  0.0  21612  3404 ?        S    13:47   0:00 /lib/systemd/systemd-udevd
pericles   28410  0.0  0.0   6632   740 pts/0    S+   13:47   0:00 grep --color=auto -i root --color=auto

/usr/sbin/cron -f /lib/systemd/systemd-udevd /usr/lib/policykit-1/polkitd --no-debug

Cron & Systemd


pericles@time:/var/www/html$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for pericles
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 
# example of job definition:
# .---------------- minute (0 - 59)
# |  .------------- hour (0 - 23)
# |  |  .---------- day of month (1 - 31)
# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...
# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# |  |  |  |  |
# *  *  *  *  * user-name command to be executed
17 *	* * *	root    cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6	* * 7	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6	1 * *	root	test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT                        LEFT          LAST                        PASSED               UNIT                         ACTIVATES                     
tue 2023-03-21 13:49:02 UTC 8s left       Tue 2023-03-21 13:48:52 UTC 1s ago               timer_backup.timer           timer_backup.service          
tue 2023-03-21 14:09:00 UTC 20min left    Tue 2023-03-21 13:39:01 UTC 9min ago             phpsessionclean.timer        phpsessionclean.service       
tue 2023-03-21 17:07:23 UTC 3h 18min left Thu 2020-10-22 20:24:53 UTC 2 years 4 months ago fwupd-refresh.timer          fwupd-refresh.service         
tue 2023-03-21 21:39:26 UTC 7h left       Thu 2020-10-22 18:44:20 UTC 2 years 4 months ago apt-daily.timer              apt-daily.service             
wed 2023-03-22 00:00:00 UTC 10h left      Tue 2023-03-21 11:10:42 UTC 2h 38min ago         logrotate.timer              logrotate.service             
wed 2023-03-22 00:00:00 UTC 10h left      Tue 2023-03-21 11:10:42 UTC 2h 38min ago         man-db.timer                 man-db.service                
wed 2023-03-22 04:05:42 UTC 14h left      Tue 2023-03-21 13:14:40 UTC 34min ago            motd-news.timer              motd-news.service             
wed 2023-03-22 06:57:32 UTC 17h left      Tue 2023-03-21 11:41:17 UTC 2h 7min ago          apt-daily-upgrade.timer      apt-daily-upgrade.service     
wed 2023-03-22 11:25:39 UTC 21h left      Tue 2023-03-21 11:25:39 UTC 2h 23min ago         systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
sun 2023-03-26 03:10:18 UTC 4 days left   Tue 2023-03-21 11:11:02 UTC 2h 37min ago         e2scrub_all.timer            e2scrub_all.service           
mon 2023-03-27 00:00:00 UTC 5 days left   Tue 2023-03-21 11:10:42 UTC 2h 38min ago         fstrim.timer                 fstrim.service                
 
11 timers listed.
Pass --all to see loaded but inactive timers, too.

tue 2023-03-21 13:49:02 UTC 8s left Tue 2023-03-21 13:48:52 UTC 1s ago timer_backup.timer timer_backup.service

Sudo Version


pericles@time:/var/www/html$ sudo -V
Sudo version 1.8.31
Sudoers policy plugin version 1.8.31
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.31

Sudo version 1.8.31

Glibc Version


pericles@time:/var/www/html$ ldd --version
ldd (Ubuntu GLIBC 2.31-0ubuntu9) 2.31
Copyright (C) 2020 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.31-0ubuntu9) 2.31