User with uid 1001: who is this

[Ralf Mardorf]

On Fri, 2022-11-04 at 14:23 +0000, Chris Green wrote:
> 
> There won't be an entry in /etc/passwd for UID 1001, that's why the
> 1001 is shown by the ls command. It's almost certainly a user who has
> been deleted

... or who never existed for this install. I sometimes copy items from
one operating system install using an UNIX alike file system to another.

1. if a number is shown, there is no entry in the config file.
2. if a user or group is shown, there is an entry in the config file,
but as long as the id isn't 0, the entry is most likely misleading. An
id might be the group libvirt by one install, but copied to another
install the same id could be for the group wireshark.

Given that 1001 is the default for an Ubuntu flavour live media user,
it's quite possible that it's an item written when using a live media.