[ubuntu-hardened] root user in the netstat command results.

[Seth Arnold]

Hello Daniel,

On Mon, May 12, 2014 at 02:50:16PM +0200, Daniel Curtis wrote:
> Now, I have a couple of tabs opened in Firefox (about 8) and
> e.g. 'netstat -p -e --inet --numeric-hosts' command shows, that
> there is only one user (not root) with a 'ESTABLISHED' connection.
> Program name is, of course, Firefox. When I open one more tab, 'netstat'
> with '-tue' flag shows many connections with several in
> a 'TIME_WAIT' State and owned by 'root' user.

I suspect the relationship with the firefox tabs is completely
coincidental; you would need to use netstat's -p flag to see which
processes own which sockets to learn more, but probably they don't have
anything to do with Firefox.

Even on a desktop system, root-owned sockets are normal, though again,
which ones may make all the difference.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20140512/30e936f7/attachment.pgp>