System/Kernel
$ uname -a ; cat /etc/*release
Linux peppo 4.9.0-12-amd64 #1 SMP Debian 4.9.210-1 (2020-01-20) x86_64 GNU/Linux
PRETTY_NAME="Debian GNU/Linux 9 (stretch)"
NAME="Debian GNU/Linux"
VERSION_ID="9"
VERSION="9 (stretch)"
VERSION_CODENAME=stretch
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"4.9.0-12-amd64x86_64Debian GNU/Linux 9 (stretch)
Networks
$ ip route ; arp -a
default via 192.168.154.254 dev ens192 onlink
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1
192.168.154.0/24 dev ens192 proto kernel scope link src 192.168.154.60
? (172.17.0.3) at 02:42:ac:11:00:03 [ether] on docker0
? (192.168.154.254) at 00:50:56:9e:0f:31 [ether] on ens192
? (172.17.0.2) at 02:42:ac:11:00:02 [ether] on docker0172.17.0.0/16
$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 463/node
tcp 0 0 0.0.0.0:113 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 612 192.168.154.60:22 192.168.45.218:49456 ESTABLISHED -Users & Groups
ar/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
systemd-timesync:x:100:102:systemd Time Synchronization,,,:/run/systemd:/bin/false
systemd-network:x:101:103:systemd Network Management,,,:/run/systemd/netif:/bin/false
systemd-resolve:x:102:104:systemd Resolver,,,:/run/systemd/resolve:/bin/false
systemd-bus-proxy:x:103:105:systemd Bus Proxy,,,:/run/systemd:/bin/false
_apt:x:104:65534::/nonexistent:/bin/false
Debian-exim:x:105:109::/var/spool/exim4:/bin/false
messagebus:x:106:110::/var/run/dbus:/bin/false
sshd:x:107:65534::/run/sshd:/usr/sbin/nologin
eleanor:x:1000:1000:eleanor,,,:/home/eleanor:/bin/rbash
identd:x:108:65534::/var/run/identd:/bin/false
total 12K
4.0K drwxr-xr-x 5 eleanor eleanor 4.0K Mar 29 18:34 eleanor
4.0K drwxr-xr-x 3 root root 4.0K May 25 2020 .
4.0K drwxr-xr-x 22 root root 4.0K May 25 2020 ..eleanor:x:1000:1000:eleanor,,,:/home/eleanor:/bin/rbash
$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(systemd-timesync) gid=102(systemd-timesync) groups=102(systemd-timesync)
uid=101(systemd-network) gid=103(systemd-network) groups=103(systemd-network)
uid=102(systemd-resolve) gid=104(systemd-resolve) groups=104(systemd-resolve)
uid=103(systemd-bus-proxy) gid=105(systemd-bus-proxy) groups=105(systemd-bus-proxy)
uid=104(_apt) gid=65534(nogroup) groups=65534(nogroup)
uid=105(Debian-exim) gid=109(Debian-exim) groups=109(Debian-exim)
uid=106(messagebus) gid=110(messagebus) groups=110(messagebus)
uid=107(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=1000(eleanor) gid=1000(eleanor) groups=1000(eleanor),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),108(netdev),999(docker)
uid=108(identd) gid=65534(nogroup) groups=65534(nogroup)uid=1000(eleanor) gid=1000(eleanor) groups=1000(eleanor),24(cdrom),25(floppy),29(audio),30(dip),44(video),46(plugdev),108(netdev),999(docker)
SUIDs
$ find / -perm -04000 -ls -type f 2>/dev/null
252 40 -rwsr-xr-x 1 root root 40536 May 17 2017 /bin/su
2434 32 -rwsr-xr-x 1 root root 30800 Aug 21 2018 /bin/fusermount
257 32 -rwsr-xr-x 1 root root 31720 Mar 7 2018 /bin/umount
256 44 -rwsr-xr-x 1 root root 44304 Mar 7 2018 /bin/mount
932 60 -rwsr-xr-x 1 root root 61240 Nov 10 2016 /bin/ping
420928 140 -rwsr-xr-x 1 root root 140944 Jan 31 2020 /usr/bin/sudo
393312 76 -rwsr-xr-x 1 root root 75792 May 17 2017 /usr/bin/gpasswd
393313 60 -rwsr-xr-x 1 root root 59680 May 17 2017 /usr/bin/passwd
393309 52 -rwsr-xr-x 1 root root 50040 May 17 2017 /usr/bin/chfn
413501 24 -rwsr-xr-x 1 root root 23352 Dec 6 2018 /usr/bin/pkexec
393310 40 -rwsr-xr-x 1 root root 40504 May 17 2017 /usr/bin/chsh
396252 40 -rwsr-xr-x 1 root root 40312 May 17 2017 /usr/bin/newgrp
409039 432 -rwsr-xr-x 1 root root 440728 Jul 15 2019 /usr/lib/openssh/ssh-keysign
6015 12 -rwsr-xr-x 1 root root 10232 Mar 28 2017 /usr/lib/eject/dmcrypt-get-device
405423 44 -rwsr-xr-- 1 root messagebus 42992 Jun 9 2019 /usr/lib/dbus-1.0/dbus-daemon-launch-helper
262164 16 -rwsr-xr-x 1 root root 14856 Dec 6 2018 /usr/lib/policykit-1/polkit-agent-helper-1
405697 996 -rwsr-xr-x 1 root root 1019656 May 13 2020 /usr/sbin/exim4SGIDs
$ find / -type f -perm -02000 -ls 2>/dev/null
113 36 -rwxr-sr-x 1 root shadow 35592 May 27 2017 /sbin/unix_chkpwd
393308 72 -rwxr-sr-x 1 root shadow 71856 May 17 2017 /usr/bin/chage
393311 24 -rwxr-sr-x 1 root shadow 22808 May 17 2017 /usr/bin/expiry
394196 28 -rwxr-sr-x 1 root tty 27448 Mar 7 2018 /usr/bin/wall
405926 20 -rwxr-sr-x 1 root mail 19008 Jan 17 2017 /usr/bin/dotlockfile
397536 16 -rwxr-sr-x 1 root tty 14768 Apr 12 2017 /usr/bin/bsd-write
398163 40 -rwxr-sr-x 1 root crontab 40264 Oct 7 2017 /usr/bin/crontab
409032 352 -rwxr-sr-x 1 root ssh 358624 Jul 15 2019 /usr/bin/ssh-agent
411178 12 -rwxr-sr-x 1 root mail 10952 Dec 24 2016 /usr/bin/dotlock.mailutilsCapabilities
$ getcap -r / 2>/dev/null
/usr/lib/x86_64-linux-gnu/gstreamer1.0/gstreamer-1.0/gst-ptp-helper = cap_net_bind_service,cap_net_admin+epProcesses
$ ps -auxwww
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.3 56912 6728 ? Ss 15:51 0:00 /sbin/init
root 242 0.0 0.2 51236 5700 ? Ss 15:51 0:00 /lib/systemd/systemd-journald
root 247 0.0 0.5 214184 11752 ? Ssl 15:51 0:04 /usr/bin/vmtoolsd
root 261 0.0 0.2 46656 4844 ? Ss 15:51 0:00 /lib/systemd/systemd-udevd
systemd+ 314 0.0 0.2 127284 4136 ? Ssl 15:51 0:00 /lib/systemd/systemd-timesyncd
root 460 0.0 0.8 153504 18356 ? Ss 15:51 0:00 /usr/bin/VGAuthService
root 461 0.0 0.1 250112 3056 ? Ssl 15:51 0:00 /usr/sbin/rsyslogd -n
eleanor 463 0.1 2.0 570828 42232 ? Ssl 15:51 0:13 /usr/bin/node /home/eleanor/helloworld/index.js
root 465 0.0 0.1 29636 2724 ? Ss 15:51 0:00 /usr/sbin/cron -f
root 466 0.0 0.2 46520 4852 ? Ss 15:51 0:00 /lib/systemd/systemd-logind
message+ 468 0.0 0.1 45128 3716 ? Ss 15:51 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nobody 476 0.0 0.0 12616 1548 ? Ss 15:51 0:00 /usr/sbin/ident2
root 483 0.0 0.3 69956 6220 ? Ss 15:51 0:00 /usr/sbin/sshd -D
root 486 0.0 2.1 571420 45088 ? Ssl 15:51 0:00 /usr/bin/containerd
root 487 0.0 4.2 526164 87056 ? Ssl 15:51 0:07 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
root 488 0.0 0.0 14524 1776 tty1 Ss+ 15:51 0:00 /sbin/agetty --noclear tty1 linux
root 1006 0.0 0.1 216868 3740 ? Sl 15:51 0:00 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 5432 -container-ip 172.17.0.3 -container-port 5432
root 1038 0.0 0.1 216868 4016 ? Sl 15:51 0:00 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 8080 -container-ip 172.17.0.2 -container-port 3000
root 1048 0.0 0.2 107696 5852 ? Sl 15:51 0:00 containerd-shim -namespace moby -workdir /var/lib/containerd/io.containerd.runtime.v1.linux/moby/326cfee157384615c872763b1a690d34c59650bfc4a9007be1df15b81b6d7bfb -address /run/containerd/containerd.sock -containerd-binary /usr/bin/containerd -runtime-root /var/run/docker/runtime-runc
root 1053 0.0 0.2 107696 5560 ? Sl 15:51 0:03 containerd-shim -namespace moby -workdir /var/lib/containerd/io.containerd.runtime.v1.linux/moby/71aa857fe988d500a65dd1699c6f699c0170e2d54f1f985c0ce92ec5d18f9a3c -address /run/containerd/containerd.sock -containerd-binary /usr/bin/containerd -runtime-root /var/run/docker/runtime-runc
999 1084 0.0 1.2 213844 26168 ? Ss 15:51 0:00 postgres
999 1090 0.8 9.3 793792 192696 ? Ssl 15:51 1:22 /usr/local/bin/ruby bin/rails server -b 0.0.0.0
999 1213 0.0 0.3 213960 7716 ? Ss 15:51 0:00 postgres: checkpointer
999 1214 0.0 0.2 213844 5736 ? Ss 15:51 0:00 postgres: background writer
999 1215 0.0 0.4 213844 9836 ? Ss 15:51 0:00 postgres: walwriter
999 1216 0.0 0.3 214384 6756 ? Ss 15:51 0:00 postgres: autovacuum launcher
999 1217 0.0 0.2 68224 4684 ? Ss 15:51 0:00 postgres: stats collector
999 1218 0.0 0.3 214268 6492 ? Ss 15:51 0:00 postgres: logical replication launcher
root 2087 0.0 0.3 99352 7096 ? Ss 17:25 0:00 sshd: eleanor [priv]
eleanor 2089 0.0 0.2 64836 6080 ? Ss 17:25 0:00 /lib/systemd/systemd --user
eleanor 2090 0.0 0.0 84496 1576 ? S 17:25 0:00 (sd-pam)
eleanor 2096 0.0 0.2 99352 4696 ? S 17:25 0:00 sshd: eleanor@pts/0
eleanor 2097 0.0 0.2 21196 5128 pts/0 Ss 17:25 0:00 -rbash
eleanor 2130 0.0 0.0 5844 720 pts/0 S 18:11 0:00 ed
eleanor 2131 0.0 0.0 4276 756 pts/0 S 18:11 0:00 sh -c /bin/sh
eleanor 2132 0.0 0.0 4276 704 pts/0 S 18:11 0:00 /bin/sh
eleanor 2137 0.0 0.0 4276 1588 pts/0 S 18:13 0:00 dash
eleanor 2422 0.0 0.1 38304 3224 pts/0 R+ 18:41 0:00 ps -auxwwweleanor 463 0.1 2.0 570828 42232 ? Ssl 15:51 0:13 /usr/bin/node /home/eleanor/helloworld/index.jsroot 465 0.0 0.1 29636 2724 ? Ss 15:51 0:00 /usr/sbin/cron -fnobody 476 0.0 0.0 12616 1548 ? Ss 15:51 0:00 /usr/sbin/ident2root 486 0.0 2.1 571420 45088 ? Ssl 15:51 0:00 /usr/bin/containerdroot 487 0.0 4.2 526164 87056 ? Ssl 15:51 0:07 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sockroot 1006 0.0 0.1 216868 3740 ? Sl 15:51 0:00 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 5432 -container-ip 172.17.0.3 -container-port 5432root 1038 0.0 0.1 216868 4016 ? Sl 15:51 0:00 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 8080 -container-ip 172.17.0.2 -container-port 3000root 1048 0.0 0.2 107696 5852 ? Sl 15:51 0:00 containerd-shim -namespace moby -workdir /var/lib/containerd/io.containerd.runtime.v1.linux/moby/326cfee157384615c872763b1a690d34c59650bfc4a9007be1df15b81b6d7bfb -address /run/containerd/containerd.sock -containerd-binary /usr/bin/containerd -runtime-root /var/run/docker/runtime-runcroot 1053 0.0 0.2 107696 5560 ? Sl 15:51 0:03 containerd-shim -namespace moby -workdir /var/lib/containerd/io.containerd.runtime.v1.linux/moby/71aa857fe988d500a65dd1699c6f699c0170e2d54f1f985c0ce92ec5d18f9a3c -address /run/containerd/containerd.sock -containerd-binary /usr/bin/containerd -runtime-root /var/run/docker/runtime-runc999 1084 0.0 1.2 213844 26168 ? Ss 15:51 0:00 postgres999 1090 0.8 9.3 793792 192696 ? Ssl 15:51 1:22 /usr/local/bin/ruby bin/rails server -b 0.0.0.0
Cron & Systemd
$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for eleanor
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
NEXT LEFT LAST PASSED UNIT ACTIVATES
Sun 2025-03-30 03:54:53 EDT 9h left Sat 2025-03-29 15:54:28 EDT 2h 48min ago apt-daily.timer apt-daily.service
Sun 2025-03-30 06:33:15 EDT 11h left Sat 2025-03-29 15:54:28 EDT 2h 48min ago apt-daily-upgrade.timer apt-daily-upgrade.
Sun 2025-03-30 16:06:07 EDT 21h left Sat 2025-03-29 16:06:07 EDT 2h 36min ago systemd-tmpfiles-clean.timer systemd-tmpfiles-c
3 timers listed.
Pass --all to see loaded but inactive timers, too.Services
$ systemctl list-units --state=running
UNIT LOAD ACTIVE SUB DESCRIPTION
proc-sys-fs-binfmt_misc.automount loaded active running Arbitrary Executable File Formats File System Automount Point
init.scope loaded active running System and Service Manager
session-15.scope loaded active running Session 15 of user eleanor
containerd.service loaded active running containerd container runtime
cron.service loaded active running Regular background program processing daemon
dbus.service loaded active running D-Bus System Message Bus
docker.service loaded active running Docker Application Container Engine
getty@tty1.service loaded active running Getty on tty1
ident2.service loaded active running RFC 1413 ident2 daemon
node.service loaded active running Node.js Example Server
open-vm-tools.service loaded active running Service for virtual machines hosted on VMware
rsyslog.service loaded active running System Logging Service
ssh.service loaded active running OpenBSD Secure Shell server
systemd-journald.service loaded active running Journal Service
systemd-logind.service loaded active running Login Service
systemd-timesyncd.service loaded active running Network Time Synchronization
systemd-udevd.service loaded active running udev Kernel Device Manager
user@1000.service loaded active running User Manager for UID 1000
vgauth.service loaded active running Authentication service for virtual machines hosted on VMware
dbus.socket loaded active running D-Bus System Message Bus Socket
docker.socket loaded active running Docker Socket for the API
syslog.socket loaded active running Syslog Socket
systemd-journald-audit.socket loaded active running Journal Audit Socket
systemd-journald-dev-log.socket loaded active running Journal Socket (/dev/log)
systemd-journald.socket loaded active running Journal Socket
systemd-udevd-control.socket loaded active running udev Control Socket
systemd-udevd-kernel.socket loaded active running udev Kernel Socket
LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.
27 loaded units listed. Pass --all to see loaded but inactive units, too.
To show all installed unit files use 'systemctl list-unit-files'.containerd.servicedocker.serviceident2.servicenode.service
Sudo Version
$ sudo --version
Sudo version 1.8.19p1
Sudoers policy plugin version 1.8.19p1
Sudoers file grammar version 45
Sudoers I/O plugin version 1.8.19p1Sudo version 1.8.19p1
Glibc Version
$ ldd --version
ldd (Debian GLIBC 2.24-11+deb9u4) 2.24
Copyright (C) 2016 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Debian GLIBC 2.24-11+deb9u4) 2.24