System/Kernel


soplaning:~$ uname -a ; cat /etc/*release
Linux BitForge 6.8.0-51-generic #52-Ubuntu SMP PREEMPT_DYNAMIC Thu Dec  5 13:09:44 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=24.04
DISTRIB_CODENAME=noble
DISTRIB_DESCRIPTION="Ubuntu 24.04.1 LTS"
PRETTY_NAME="Ubuntu 24.04.1 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04.1 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo
  • 6.8.0-51-generic
  • x86_64
  • Ubuntu 24.04.1 LTS (Noble Numbat)

Networks


soplaning:~$ ip route ; arp -a
default via 192.168.196.254 dev ens192 proto static 
192.168.196.0/24 dev ens192 proto kernel scope link src 192.168.196.186 
_gateway (192.168.196.254) at 00:50:56:9e:b9:f7 [ether] on ens192
soplaning:~$ netstat -antup | grep LIST
tcp        0      0 127.0.0.1:33060         0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.54:53           0.0.0.0:*               LISTEN      -                   

tcp 0 0 127.0.0.1:33060 0.0.0.0:* LISTEN -

Users & Groups


soplaning:~$ cat /etc/passwd ; ls -lasht /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
_apt:x:42:65534::/nonexistent:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-network:x:998:998:systemd Network Management:/:/usr/sbin/nologin
systemd-timesync:x:997:997:systemd Time Synchronization:/:/usr/sbin/nologin
dhcpcd:x:100:65534:DHCP Client Daemon,,,:/usr/lib/dhcpcd:/bin/false
messagebus:x:101:102::/nonexistent:/usr/sbin/nologin
systemd-resolve:x:992:992:systemd Resolver:/:/usr/sbin/nologin
pollinate:x:102:1::/var/cache/pollinate:/bin/false
polkitd:x:991:991:User for polkitd:/:/usr/sbin/nologin
syslog:x:103:104::/nonexistent:/usr/sbin/nologin
uuidd:x:104:105::/run/uuidd:/usr/sbin/nologin
tcpdump:x:105:107::/nonexistent:/usr/sbin/nologin
tss:x:106:108:TPM software stack,,,:/var/lib/tpm:/bin/false
landscape:x:107:109::/var/lib/landscape:/usr/sbin/nologin
fwupd-refresh:x:989:989:Firmware update daemon:/var/lib/fwupd:/usr/sbin/nologin
usbmux:x:108:46:usbmux daemon,,,:/var/lib/usbmux:/usr/sbin/nologin
sshd:x:109:65534::/run/sshd:/usr/sbin/nologin
ubuntu:x:1000:1000:Ubuntu:/home/ubuntu:/bin/bash
mysql:x:110:110:MySQL Server,,,:/nonexistent:/bin/false
jack:x:1001:1001::/home/jack:/bin/bash
total 16K
4.0K drwxr-x---  2 jack   jack   4.0K Jan 16 13:21 jack
4.0K drwxr-xr-x  4 root   root   4.0K Jan 15 14:47 .
4.0K drwxr-x---  3 ubuntu ubuntu 4.0K Nov  7 00:34 ubuntu
4.0K drwxr-xr-x 23 root   root   4.0K Nov  7 00:33 ..
  • ubuntu
  • jack
soplaning:~$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=42(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=998(systemd-network) gid=998(systemd-network) groups=998(systemd-network)
uid=997(systemd-timesync) gid=997(systemd-timesync) groups=997(systemd-timesync)
uid=100(dhcpcd) gid=65534(nogroup) groups=65534(nogroup)
uid=101(messagebus) gid=102(messagebus) groups=102(messagebus)
uid=992(systemd-resolve) gid=992(systemd-resolve) groups=992(systemd-resolve)
uid=102(pollinate) gid=1(daemon) groups=1(daemon)
uid=991(polkitd) gid=991(polkitd) groups=991(polkitd)
uid=103(syslog) gid=104(syslog) groups=104(syslog),4(adm)
uid=104(uuidd) gid=105(uuidd) groups=105(uuidd)
uid=105(tcpdump) gid=107(tcpdump) groups=107(tcpdump)
uid=106(tss) gid=108(tss) groups=108(tss)
uid=107(landscape) gid=109(landscape) groups=109(landscape)
uid=989(fwupd-refresh) gid=989(fwupd-refresh) groups=989(fwupd-refresh)
uid=108(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=109(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1000(ubuntu) gid=1000(ubuntu) groups=1000(ubuntu),4(adm),24(cdrom),27(sudo),30(dip),101(lxd)
uid=110(mysql) gid=110(mysql) groups=110(mysql)
uid=1001(jack) gid=1001(jack) groups=1001(jack)
  • uid=1000(ubuntu) gid=1000(ubuntu) groups=1000(ubuntu),4(adm),24(cdrom),27(sudo),30(dip),101(lxd)
  • uid=1001(jack) gid=1001(jack) groups=1001(jack)

SUIDs


soplaning:~$ find / -perm -04000 -ls -type f 2>/dev/null | grep -v '/snap'
     1121    272 -rwsr-xr-x   1 root     root       277936 Apr  8  2024 /usr/bin/sudo
      843     40 -rwsr-xr-x   1 root     root        40664 Apr  9  2024 /usr/bin/newgrp
     1202     40 -rwsr-xr-x   1 root     root        39296 Aug  9  2024 /usr/bin/umount
      830     52 -rwsr-xr-x   1 root     root        51584 Aug  9  2024 /usr/bin/mount
      879     64 -rwsr-xr-x   1 root     root        64152 Apr  9  2024 /usr/bin/passwd
      560     72 -rwsr-xr-x   1 root     root        72792 Apr  9  2024 /usr/bin/chfn
     1120     56 -rwsr-xr-x   1 root     root        55680 Aug  9  2024 /usr/bin/su
      690     76 -rwsr-xr-x   1 root     root        76248 Apr  9  2024 /usr/bin/gpasswd
      566     44 -rwsr-xr-x   1 root     root        44760 Apr  9  2024 /usr/bin/chsh
      674     40 -rwsr-xr-x   1 root     root        39296 Apr  8  2024 /usr/bin/fusermount3
     1612    336 -rwsr-xr-x   1 root     root       342632 Aug  9  2024 /usr/lib/openssh/ssh-keysign
     1633     20 -rwsr-xr-x   1 root     root        18736 Apr  3  2024 /usr/lib/polkit-1/polkit-agent-helper-1
     1402     36 -rwsr-xr--   1 root     messagebus    34960 Aug  9  2024 /usr/lib/dbus-1.0/dbus-daemon-launch-helper

SGIDs


soplaning:~$ find / -type f -perm -02000 -ls 2>/dev/null | grep -v '/snap'
      657     28 -rwxr-sr-x   1 root     shadow      27152 Apr  9  2024 /usr/bin/expiry
     1109    304 -rwxr-sr-x   1 root     _ssh       309688 Aug  9  2024 /usr/bin/ssh-agent
      556     72 -rwxr-sr-x   1 root     shadow      72184 Apr  9  2024 /usr/bin/chage
      591     40 -rwxr-sr-x   1 root     crontab     39664 Aug 27  2024 /usr/bin/crontab
    15291     32 -rwxr-sr-x   1 root     shadow      31040 May  2  2024 /usr/sbin/unix_chkpwd
    15245     28 -rwxr-sr-x   1 root     shadow      26944 May  2  2024 /usr/sbin/pam_extrausers_chkpwd
    14626     16 -rwxr-sr-x   1 root     utmp        14488 Aug 27  2024 /usr/lib/x86_64-linux-gnu/utempter/utempter

Capabilities


soplaning:~$ getcap -r / 2>/dev/null
/usr/bin/ping cap_net_raw=ep
/usr/bin/mtr-packet cap_net_raw=ep
/usr/lib/x86_64-linux-gnu/gstreamer1.0/gstreamer-1.0/gst-ptp-helper cap_net_bind_service,cap_net_admin,cap_sys_nice=ep

Processes


soplaning:~$ ps -auxwww
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           1  0.0  0.6  22368 13284 ?        Ss   14:33   0:01 /sbin/init
root         329  0.0  0.7  50496 15788 ?        S<s  14:33   0:00 /usr/lib/systemd/systemd-journald
root         366  0.0  1.3 354636 27392 ?        SLsl 14:33   0:00 /sbin/multipathd -d -s
root         393  0.0  0.4  29640  8276 ?        Ss   14:33   0:00 /usr/lib/systemd/systemd-udevd
systemd+     535  0.0  0.6  21576 12672 ?        Ss   14:33   0:00 /usr/lib/systemd/systemd-resolved
systemd+     540  0.0  0.3  91020  7808 ?        Ssl  14:33   0:00 /usr/lib/systemd/systemd-timesyncd
systemd+     601  0.0  0.4  18992  9472 ?        Ss   14:33   0:00 /usr/lib/systemd/systemd-networkd
root         673  0.0  0.5  53464 11904 ?        Ss   14:33   0:00 /usr/bin/VGAuthService
root         674  0.0  0.5 317232 10672 ?        Ssl  14:33   0:05 /usr/bin/vmtoolsd
message+     762  0.0  0.2   9796  5376 ?        Ss   14:33   0:00 @dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
polkitd      796  0.0  0.3 308160  7936 ?        Ssl  14:33   0:00 /usr/lib/polkit-1/polkitd --no-debug
root         812  0.0  0.4  17620  8064 ?        Ss   14:33   0:00 /usr/lib/systemd/systemd-logind
root         816  0.0  0.6 468988 13440 ?        Ssl  14:33   0:00 /usr/libexec/udisks2/udisksd
root         830  0.0  1.1 109640 22912 ?        Ssl  14:33   0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal
syslog       837  0.0  0.3 222508  6528 ?        Ssl  14:33   0:00 /usr/sbin/rsyslogd -n -iNONE
root         858  0.0  0.6 318360 12672 ?        Ssl  14:33   0:00 /usr/sbin/ModemManager
mysql       1154  0.3 21.5 1789164 434288 ?      Ssl  14:33   0:27 /usr/sbin/mysqld
root        1258  0.0  0.1   6824  2688 ?        Ss   14:35   0:00 /usr/sbin/cron -f -P
root        1283  0.0  0.0   6104  1920 tty1     Ss+  14:35   0:00 /sbin/agetty -o -p -- \u --noclear - linux
root        1290  0.0  1.1 216132 23872 ?        Ss   14:35   0:00 /usr/sbin/apache2 -k start
root        1723  0.0  0.3  12020  7808 ?        Ss   14:36   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
www-data    1977  0.0  1.5 221384 31072 ?        S    14:43   0:00 /usr/sbin/apache2 -k start
www-data    2118  0.0  1.6 221380 32736 ?        S    14:50   0:00 /usr/sbin/apache2 -k start
root        2281  0.0  0.4 313828  8576 ?        Ssl  15:12   0:00 /usr/libexec/upowerd
www-data    2485  0.0  1.5 221388 30300 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
www-data    2491  0.0  1.5 221352 30700 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
www-data    2501  0.0  1.5 221372 30688 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
www-data    2506  0.0  1.5 221356 31968 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
www-data    2514  0.0  1.5 221376 30432 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
www-data    2525  0.0  1.5 221376 30560 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
www-data    2528  0.0  1.5 221196 30328 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
www-data    2534  0.0  1.6 221444 33928 ?        S    15:43   0:00 /usr/sbin/apache2 -k start
root        3164  0.0  1.0 372640 20992 ?        Ssl  16:39   0:00 /usr/libexec/packagekitd
  • root 1258 0.0 0.1 6824 2688 ? Ss 14:35 0:00 /usr/sbin/cron -f -P
  • mysql 1154 0.3 21.5 1789164 434288 ? Ssl 14:33 0:27 /usr/sbin/mysqld

Cron & Systemd


soplaning:~$ crontab -l ; cat /etc/crontab ; systemctl list-timers
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
 
SHELL=/bin/sh
# You can also override PATH, but by default, newer versions inherit it from the environment
#PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
# Example of job definition:
# .---------------- minute (0 - 59)
# |  .------------- hour (0 - 23)
# |  |  .---------- day of month (1 - 31)
# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...
# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
# |  |  |  |  |
# *  *  *  *  * user-name command to be executed
17 *	* * *	root	cd / && run-parts --report /etc/cron.hourly
25 6	* * *	root	test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.daily; }
47 6	* * 7	root	test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.weekly; }
52 6	1 * *	root	test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.monthly; }
#
NEXT                            LEFT LAST                              PASSED UNIT                           ACTIVATES
Sat 2025-04-12 16:50:00 UTC     5min Sat 2025-04-12 16:40:00 UTC 4min 19s ago sysstat-collect.timer          sysstat-collect.service
Sat 2025-04-12 17:09:00 UTC    24min Sat 2025-04-12 16:39:36 UTC 4min 43s ago phpsessionclean.timer          phpsessionclean.service
Sat 2025-04-12 17:14:25 UTC    30min Sat 2025-04-12 16:15:45 UTC    28min ago fwupd-refresh.timer            fwupd-refresh.service
Sat 2025-04-12 18:16:21 UTC 1h 32min Sat 2025-04-12 16:39:36 UTC 4min 43s ago apt-daily.timer                apt-daily.service
Sat 2025-04-12 19:24:45 UTC 2h 40min Thu 2025-01-16 13:21:13 UTC            - motd-news.timer                motd-news.service
Sun 2025-04-13 00:00:00 UTC       7h Sat 2025-04-12 14:35:20 UTC  2h 8min ago dpkg-db-backup.timer           dpkg-db-backup.service
Sun 2025-04-13 00:00:00 UTC       7h Sat 2025-04-12 14:35:20 UTC  2h 8min ago logrotate.timer                logrotate.service
Sun 2025-04-13 00:07:00 UTC       7h Sat 2025-04-12 14:35:20 UTC  2h 8min ago sysstat-summary.timer          sysstat-summary.service
Sun 2025-04-13 03:10:03 UTC      10h Sat 2025-04-12 14:35:20 UTC  2h 8min ago e2scrub_all.timer              e2scrub_all.service
Sun 2025-04-13 06:04:40 UTC      13h Sat 2025-04-12 14:35:22 UTC  2h 8min ago apt-daily-upgrade.timer        apt-daily-upgrade.service
Sun 2025-04-13 07:24:02 UTC      14h Sat 2025-04-12 15:48:45 UTC    55min ago man-db.timer                   man-db.service
Sun 2025-04-13 14:38:26 UTC      21h Sat 2025-04-12 14:38:26 UTC  2h 5min ago update-notifier-download.timer update-notifier-download.service
Sun 2025-04-13 14:48:11 UTC      22h Sat 2025-04-12 14:48:11 UTC 1h 56min ago systemd-tmpfiles-clean.timer   systemd-tmpfiles-clean.service
Mon 2025-04-14 00:31:36 UTC 1 day 7h Sat 2025-04-12 14:37:10 UTC  2h 7min ago fstrim.timer                   fstrim.service
Tue 2025-04-15 06:50:12 UTC   2 days Thu 2024-11-07 00:34:11 UTC            - update-notifier-motd.timer     update-notifier-motd.service
 
15 timers listed.
Pass --all to see loaded but inactive timers, too.

Services


systemctl list-units --state=running

Sudo Version


soplaning:~$ sudo --version
Sudo version 1.9.15p5
Sudoers policy plugin version 1.9.15p5
Sudoers file grammar version 50
Sudoers I/O plugin version 1.9.15p5
Sudoers audit plugin version 1.9.15p5

Sudo version 1.9.15p5

Glibc Version


soplaning:~$ ldd --version
ldd (Ubuntu GLIBC 2.39-0ubuntu8.3) 2.39
Copyright (C) 2024 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.

ldd (Ubuntu GLIBC 2.39-0ubuntu8.3) 2.39