SM0 She11

Path: / / usr / lib / systemd

Full Path (server): /usr/lib/systemd

📁 boot Open [D]
📁 catalog Open [D]
📄 libsystemd-shared.abignore [E] [D]
📁 network Open [D]
📁 ntp-units.d Open [D]
📄 purge-nobody-user [E] [D]
📄 resolv.conf [E] [D]
📁 system Open [D]
📁 system-generators Open [D]
📁 system-preset Open [D]
📁 system-shutdown Open [D]
📁 system-sleep Open [D]
📄 systemd [E] [D]
📄 systemd-ac-power [E] [D]
📄 systemd-backlight [E] [D]
📄 systemd-binfmt [E] [D]
📄 systemd-bless-boot [E] [D]
📄 systemd-boot-check-no-failures [E] [D]
📄 systemd-cgroups-agent [E] [D]
📄 systemd-coredump [E] [D]
📄 systemd-cryptsetup [E] [D]
📄 systemd-export [E] [D]
📄 systemd-fsck [E] [D]
📄 systemd-growfs [E] [D]
📄 systemd-hibernate-resume [E] [D]
📄 systemd-hostnamed [E] [D]
📄 systemd-initctl [E] [D]
📄 systemd-integritysetup [E] [D]
📄 systemd-journald [E] [D]
📄 systemd-localed [E] [D]
📄 systemd-logind [E] [D]
📄 systemd-makefs [E] [D]
📄 systemd-measure [E] [D]
📄 systemd-modules-load [E] [D]
📄 systemd-network-generator [E] [D]
📄 systemd-pcrphase [E] [D]
📄 systemd-pstore [E] [D]
📄 systemd-quotacheck [E] [D]
📄 systemd-random-seed [E] [D]
📄 systemd-remount-fs [E] [D]
📄 systemd-reply-password [E] [D]
📄 systemd-rfkill [E] [D]
📄 systemd-shutdown [E] [D]
📄 systemd-sleep [E] [D]
📄 systemd-socket-proxyd [E] [D]
📄 systemd-sulogin-shell [E] [D]
📄 systemd-sysctl [E] [D]
📄 systemd-sysroot-fstab-check [E] [D]
📄 systemd-sysupdate [E] [D]
📄 systemd-sysv-install [E] [D]
📄 systemd-timedated [E] [D]
📄 systemd-udevd [E] [D]
📄 systemd-update-done [E] [D]
📄 systemd-update-helper [E] [D]
📄 systemd-update-utmp [E] [D]
📄 systemd-user-runtime-dir [E] [D]
📄 systemd-user-sessions [E] [D]
📄 systemd-vconsole-setup [E] [D]
📄 systemd-veritysetup [E] [D]
📄 systemd-volatile-root [E] [D]
📄 systemd-xdg-autostart-condition [E] [D]
📁 user Open [D]
📁 user-environment-generators Open [D]
📁 user-generators Open [D]
📁 user-preset Open [D]

Editing: purge-nobody-user

#!/usr/bin/bash -eu

if [ $UID -ne 0 ]; then
    echo "WARNING: This script needs to run as root to be effective"
    exit 1
fi

export SYSTEMD_NSS_BYPASS_SYNTHETIC=1

if [ "${1:-}" = "--ignore-journal" ]; then
    shift
    ignore_journal=1
else
    ignore_journal=0
fi

echo "Checking processes..."
if ps h -u 99 | grep .; then
    echo "ERROR: ps reports processes with UID 99!"
    exit 2
fi
echo "... not found"

echo "Checking UTMP..."
if w -h 199 | grep . ; then
    echo "ERROR: w reports UID 99 as active!"
    exit 2
fi
if w -h nobody | grep . ; then
    echo "ERROR: w reports user nobody as active!"
    exit 2
fi
echo "... not found"

echo "Checking the journal..."
if [ "$ignore_journal" = 0 ] && journalctl -q -b -n10 _UID=99 | grep . ; then
    echo "ERROR: journalctl reports messages from UID 99 in current boot!"
    exit 2
fi
echo "... not found"

echo "Looking for files in /etc, /run, /tmp, and /var..."
if find /etc /run /tmp /var -uid 99 -print | grep -m 10 . ; then
    echo "ERROR: found files belonging to UID 99"
    exit 2
fi
echo "... not found"

echo "Checking if nobody is defined correctly..."
if getent passwd nobody |
	grep '^nobody:[x*]:65534:65534:.*:/:/sbin/nologin';
then
    echo "OK, nothing to do."
    exit 0
else
    echo "NOTICE: User nobody is not defined correctly"
fi

echo "Checking if nfsnobody or something else is using the uid..."
if getent passwd 65534 | grep . ; then
    echo "NOTICE: will have to remove this user"
else
    echo "... not found"
fi

if [ "${1:-}" = "-x" ]; then
    if getent passwd nobody >/dev/null; then
	# this will remove both the user and the group.
	( set -x
   	  userdel nobody
	)
    fi

if getent passwd 65534 >/dev/null; then
	# Make sure the uid is unused. This should free gid too.
	name="$(getent passwd 65534 | cut -d: -f1)"
	( set -x
	  userdel "$name"
	)
    fi

if grep -qE '^(passwd|group):.*\bsss\b' /etc/nsswitch.conf; then
	echo "Sleeping, so sss can catch up"
	sleep 3
    fi

if getent group 65534; then
	# Make sure the gid is unused, even if uid wasn't.
	name="$(getent group 65534 | cut -d: -f1)"
	( set -x
	  groupdel "$name"
	)
    fi

# systemd-sysusers uses the same gid and uid
    ( set -x
      systemd-sysusers --inline 'u nobody 65534 "Kernel Overflow User" / /sbin/nologin'
    )
else
    echo "Pass '-x' to perform changes"
fi