550 Unix Domain Sockets Connected to my computer

[jean52]

Hello,

I work with confidential medical files, and don't want even one extra device connected to my computer--let alone over 500. I need help, because between 500-600 unix domain sockets are connected to my laptop.

I am attaching the list of unix domain sockets to this post. I don't know why they are attached, but could someone please tell me how to block them?

unix domain sockets.odt

(26.46 KiB) Downloaded 13 times

I'm sorry: I can't figure out how to use this code to create a paste bin: inxi -Frxzc0 | nc termbin.com 9999. Could you please tell me how to do this for future posts?

I just uploaded my system information to my clipboard, but I don't know where that is. I guess I'll paste it below.

Thank you very much,
Jean

Code: Select all

System:    Kernel: 5.4.0-74-generic x86_64 bits: 64 compiler: gcc v: 9.3.0 Desktop: MATE 1.24.0 
           wm: marco dm: LightDM Distro: Linux Mint 20.2 Uma base: Ubuntu 20.04 focal 
Machine:   Type: Laptop System: HP product: HP Laptop 17-bs0xx v: Type1ProductConfigId 
           serial: <filter> Chassis: type: 10 serial: <filter> 
           Mobo: HP model: 8339 v: 49.38 serial: <filter> UEFI: Insyde v: F.20 date: 11/05/2018 
Battery:   ID-1: BAT0 charge: 19.2 Wh condition: 19.2/19.2 Wh (100%) volts: 12.5/10.9 
           model: 133-42-6E JC03031 serial: <filter> status: Full 
CPU:       Topology: Dual Core model: Intel Core i7-7500U bits: 64 type: MT MCP arch: Amber Lake 
           rev: 9 L2 cache: 4096 KiB 
           flags: avx avx2 lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx bogomips: 23199 
           Speed: 2972 MHz min/max: 400/3500 MHz Core speeds (MHz): 1: 3143 2: 3141 3: 3130 
           4: 3131 
Graphics:  Device-1: Intel HD Graphics 620 vendor: Hewlett-Packard driver: i915 v: kernel 
           bus ID: 00:02.0 chip ID: 8086:5916 
           Display: x11 server: X.Org 1.20.9 driver: modesetting unloaded: fbdev,vesa 
           compositor: marco resolution: 1600x900~60Hz 
           OpenGL: renderer: Mesa Intel HD Graphics 620 (KBL GT2) v: 4.6 Mesa 21.0.3 
           direct render: Yes 
Audio:     Device-1: Intel Sunrise Point-LP HD Audio vendor: Hewlett-Packard driver: snd_hda_intel 
           v: kernel bus ID: 00:1f.3 chip ID: 8086:9d71 
           Sound Server: ALSA v: k5.4.0-74-generic 
Network:   Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet 
           vendor: Hewlett-Packard driver: r8169 v: kernel port: 3000 bus ID: 01:00.0 
           chip ID: 10ec:8168 
           IF: eno1 state: up speed: 1000 Mbps duplex: full mac: <filter> 
           Device-2: Intel Dual Band Wireless-AC 3168NGW [Stone Peak] driver: iwlwifi v: kernel 
           port: 3000 bus ID: 02:00.0 chip ID: 8086:24fb 
           IF: wlp2s0 state: down mac: <filter> 
Drives:    Local Storage: total: 1.82 TiB used: 28.42 GiB (1.5%) 
           ID-1: /dev/sda vendor: Seagate model: ST2000LM007-1R8174 size: 1.82 TiB speed: 6.0 Gb/s 
           serial: <filter> 
Partition: ID-1: / size: 1.79 TiB used: 14.21 GiB (0.8%) fs: ext4 dev: /dev/dm-0 
           ID-2: swap-1 size: 976.0 MiB used: 4.0 MiB (0.4%) fs: swap dev: /dev/dm-1 
USB:       Hub: 1-0:1 info: Full speed (or root) Hub ports: 12 rev: 2.0 chip ID: 1d6b:0002 
           Device-1: 1-5:2 info: Intel type: Bluetooth driver: btusb rev: 2.0 chip ID: 8087:0aa7 
           Device-2: 1-7:3 info: Cheng Uei Precision Industry (Foxlink) HP TrueVision HD Camera 
           type: Video driver: uvcvideo rev: 2.0 chip ID: 05c8:03ac 
           Hub: 2-0:1 info: Full speed (or root) Hub ports: 6 rev: 3.0 chip ID: 1d6b:0003 
Sensors:   System Temperatures: cpu: 66.0 C mobo: 32.0 C 
           Fan Speeds (RPM): N/A 
Repos:     No active apt repos in: /etc/apt/sources.list 
           Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list 
           1: deb http: //packages.linuxmint.com uma main upstream import backport
           2: deb http: //mirrors.mit.edu/ubuntu focal main restricted universe multiverse
           3: deb http: //mirrors.mit.edu/ubuntu focal-updates main restricted universe multiverse
           4: deb http: //mirrors.mit.edu/ubuntu focal-backports main restricted universe multiverse
           5: deb http: //security.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
           6: deb http: //archive.canonical.com/ubuntu/ focal partner
Info:      Processes: 205 Uptime: 1h 46m Memory: 7.53 GiB used: 1.88 GiB (25.0%) Init: systemd 
           v: 245 runlevel: 5 target: graphical.target Compilers: gcc: 9.3.0 alt: 9 
           Client: Unknown python3.8 client inxi: 3.0.38

[rene]

A UNIX domain socket is not a network socket. Is merely a filesystem-based endpoint for communication between processes on the same machine; a so-called IPC mechanism. Think of that /run/acpid socket as an example; it's just something that the acpid process ("daemon") can post ACPI events, i.e., power management stuff, to and to which any potentially in any such event interested application on the same machine can listen simply by opening said /run/acpid socket.

There's more IPC mechanisms, with shared memory and these days D-Bus the most important ones after UNIX domain sockets, but latter certainly are the standard. They are merely convenient system-local communication channels between local processes, and the only reasons they show up in e.g. netstat is that they were conveniently modelled after network sockets, i.e., after very similar endpoints for communication between processes not (necessarily) on the same machine.

You have nothing to fear from them.

[jean52]

Hi Rene,

Thank you very much. I will try not to worry then.

Jean