Gecko [ naturenectar.co.uk ]

Name	Size	Permission	Date
boot	[ DIR ]	drwxr-xr-x	2025-06-24 13:02
catalog	[ DIR ]	drwxr-xr-x	2025-08-15 18:20
network	[ DIR ]	drwxr-xr-x	2025-08-15 18:20
ntp-units.d	[ DIR ]	drwxr-xr-x	2025-08-15 18:20
system	[ DIR ]	drwxr-xr-x	2025-11-10 09:36
system-generators	[ DIR ]	drwxr-xr-x	2025-08-15 18:22
system-preset	[ DIR ]	drwxr-xr-x	2025-08-15 18:39
system-shutdown	[ DIR ]	drwxr-xr-x	2025-08-15 18:20
system-sleep	[ DIR ]	drwxr-xr-x	2025-06-24 13:02
user	[ DIR ]	drwxr-xr-x	2025-08-15 18:22
user-environment-generators	[ DIR ]	drwxr-xr-x	2025-08-15 18:22
user-generators	[ DIR ]	drwxr-xr-x	2025-08-15 18:20
user-preset	[ DIR ]	drwxr-xr-x	2025-08-15 18:39
libsystemd-shared.abignore	100 B	-rw-r--r--	2025-06-24 13:02
purge-nobody-user	2.3 KB	-rwxr-xr-x	2025-06-24 13:02
resolv.conf	710 B	-rw-r--r--	2022-10-31 18:59
systemd	95.74 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-ac-power	15.03 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-backlight	35.38 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-binfmt	23.31 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-bless-boot	31.6 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-boot-check-no-failures	15.3 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-cgroups-agent	15.24 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-coredump	67.73 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-cryptsetup	92.37 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-export	43.55 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-fsck	31.31 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-growfs	23.26 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-hibernate-resume	15.05 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-hostnamed	51.91 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-initctl	23.34 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-integritysetup	23.52 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-journald	181.16 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-localed	51.69 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-logind	295.72 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-makefs	15.25 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-measure	51.93 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-modules-load	23.54 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-network-generator	43.66 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-pcrphase	31.54 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-pstore	23.41 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-quotacheck	15.08 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-random-seed	27.3 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-remount-fs	19.28 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-reply-password	15.27 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-rfkill	23.35 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-shutdown	51.51 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-sleep	31.37 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-socket-proxyd	31.49 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-sulogin-shell	19.35 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-sysctl	27.55 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-sysroot-fstab-check	56.16 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-sysupdate	124.7 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-timedated	47.63 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-update-done	15.27 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-update-helper	3.76 KB	-rwxr-xr-x	2025-06-24 13:01
systemd-update-utmp	23.35 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-user-runtime-dir	23.3 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-user-sessions	15.05 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-vconsole-setup	19.3 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-veritysetup	23.47 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-volatile-root	23.3 KB	-rwxr-xr-x	2025-06-24 13:02
systemd-xdg-autostart-condition	15.3 KB	-rwxr-xr-x	2025-06-24 13:02

Rename

#!/usr/bin/bash -eu

if [ $UID -ne 0 ]; then
    echo "WARNING: This script needs to run as root to be effective"
    exit 1
fi

export SYSTEMD_NSS_BYPASS_SYNTHETIC=1

if [ "${1:-}" = "--ignore-journal" ]; then
    shift
    ignore_journal=1
else
    ignore_journal=0
fi

echo "Checking processes..."
if ps h -u 99 | grep .; then
    echo "ERROR: ps reports processes with UID 99!"
    exit 2
fi
echo "... not found"

echo "Checking UTMP..."
if w -h 199 | grep . ; then
    echo "ERROR: w reports UID 99 as active!"
    exit 2
fi
if w -h nobody | grep . ; then
    echo "ERROR: w reports user nobody as active!"
    exit 2
fi
echo "... not found"

echo "Checking the journal..."
if [ "$ignore_journal" = 0 ] && journalctl -q -b -n10 _UID=99 | grep . ; then
    echo "ERROR: journalctl reports messages from UID 99 in current boot!"
    exit 2
fi
echo "... not found"

echo "Looking for files in /etc, /run, /tmp, and /var..."
if find /etc /run /tmp /var -uid 99 -print | grep -m 10 . ; then
    echo "ERROR: found files belonging to UID 99"
    exit 2
fi
echo "... not found"

echo "Checking if nobody is defined correctly..."
if getent passwd nobody |
	grep '^nobody:[x*]:65534:65534:.*:/:/sbin/nologin';
then
    echo "OK, nothing to do."
    exit 0
else
    echo "NOTICE: User nobody is not defined correctly"
fi

echo "Checking if nfsnobody or something else is using the uid..."
if getent passwd 65534 | grep . ; then
    echo "NOTICE: will have to remove this user"
else
    echo "... not found"
fi

if [ "${1:-}" = "-x" ]; then
    if getent passwd nobody >/dev/null; then
	# this will remove both the user and the group.
	( set -x
   	  userdel nobody
	)
    fi

if getent passwd 65534 >/dev/null; then
	# Make sure the uid is unused. This should free gid too.
	name="$(getent passwd 65534 | cut -d: -f1)"
	( set -x
	  userdel "$name"
	)
    fi

if grep -qE '^(passwd|group):.*\bsss\b' /etc/nsswitch.conf; then
	echo "Sleeping, so sss can catch up"
	sleep 3
    fi

if getent group 65534; then
	# Make sure the gid is unused, even if uid wasn't.
	name="$(getent group 65534 | cut -d: -f1)"
	( set -x
	  groupdel "$name"
	)
    fi

# systemd-sysusers uses the same gid and uid
    ( set -x
      systemd-sysusers --inline 'u nobody 65534 "Kernel Overflow User" / /sbin/nologin'
    )
else
    echo "Pass '-x' to perform changes"
fi