I'm seeing the following in /var/log/auth.log
Jun 1 06:32:49 [redacted] su: (to nobody) root on none
Jun 1 06:32:49 [redacted] su: pam_unix(su:session): session opened for user nobody(uid=65534) by (uid=0)
Jun 1 06:32:49 [redacted] systemd: pam_unix(systemd-user:session): session opened for user nobody(uid=65534) by (uid=0)
Jun 1 06:32:49 [redacted] su: pam_unix(su:session): session closed for user nobody
Matching entries in /var/log/daemon.log
Jun 1 06:32:49 [redacted] systemd[1]: Created slice User Slice of UID 65534.
Jun 1 06:32:49 [redacted] systemd[1]: Starting User Runtime Directory /run/user/65534...
Jun 1 06:32:49 [redacted] systemd[1]: Finished User Runtime Directory /run/user/65534.
Jun 1 06:32:49 [redacted] systemd[1]: Starting User Manager for UID 65534...
Jun 1 06:32:49 [redacted] systemd[39580]: Queued start job for default target Main User Target.
Jun 1 06:32:49 [redacted] systemd[39580]: Created slice User Application Slice.
Jun 1 06:32:49 [redacted] systemd[39580]: Reached target Paths.
Jun 1 06:32:49 [redacted] systemd[39580]: Reached target Timers.
Jun 1 06:32:49 [redacted] systemd[39580]: Listening on GnuPG network certificate management daemon.
Jun 1 06:32:49 [redacted] systemd[39580]: Listening on GnuPG cryptographic agent and passphrase cache (access for web browsers).
Jun 1 06:32:49 [redacted] systemd[39580]: Listening on GnuPG cryptographic agent and passphrase cache (restricted).
Jun 1 06:32:49 [redacted] systemd[39580]: Listening on GnuPG cryptographic agent (ssh-agent emulation).
Jun 1 06:32:49 [redacted] systemd[39580]: Listening on GnuPG cryptographic agent and passphrase cache.
Jun 1 06:32:49 [redacted] systemd[39580]: Reached target Sockets.
Jun 1 06:32:49 [redacted] systemd[39580]: Reached target Basic System.
Looking in /usr/lib/systemd
...
$ sudo find /usr/lib/systemd -name gpg\* -o -name gnupg\*
/usr/lib/systemd/user/gpg-agent-ssh.socket
/usr/lib/systemd/user/gpg-agent.service
/usr/lib/systemd/user/gpg-agent-browser.socket
/usr/lib/systemd/user/gpg-agent-extra.socket
/usr/lib/systemd/user/gpg-agent.socket
However, there's no gpg-agent
listed in list-units
or list-unit-files
, and the status
command returns an error:
$ sudo systemctl status gpg-agent
Unit gpg-agent.service could not be found.
I also tried --user:
$ sudo systemctl status --user
Failed to connect to bus: $DBUS_SESSION_BUS_ADDRESS and $XDG_RUNTIME_DIR not defined (consider using --machine=<user>@.host --user to connect to bus of other user)
Clearly I'm missing something here...
Where in systemd is the configuration file that is executing su
to user nobody
and launching gpg-agent?