11

I was looking at the process list on my Ubuntu 18.04 server and saw the following two processes:

 930 ?        Ssl    0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
 958 ?        Ssl    0:00 /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wait-for-signal

I am sure I did not start them. What are they? Are they harmful? How do I stop them from reappearing?

Erel Segal-Halevi
  • 33,955
  • 36
  • 114
  • 183

2 Answers2

13

These processes are likely not harmful[1].

The "unattended upgrades" mechanism is responsible for automatically installing security updates. You can find more information in official documentation, e.g. here.

The networkd-dispatcher allows triggering of scripts in response to a change of the network interface state. Again, if you are curious, check the official docs.

There are plently of processes that the OS starts without the user's explicit knowledge or consent. This is perfectly OK and for the most part you should not interfere unless you know exactly what you are doing. Such processes might be crucial to OS operation and even beneficial for your OS security (such as the unattended upgrades system).


[1] Of course, we can't truly know without having full access to your computer

elemakil
  • 3,681
  • 28
  • 53
  • 1
    I actually looked at that page, but did not see any mention of python there. My processes are both related somehow to python.. – Erel Segal-Halevi Mar 11 '19 at 19:21
  • 1
    @ErelSegal-Halevi Only in the sense that the functionality of the processes is implemented as python script. See for example [the source code of networkd-dispatcher](https://gitlab.com/craftyguy/networkd-dispatcher/blob/master/networkd-dispatcher). Think of it this way: The programmers wrote a python script which must be run "in a python environment". Hence the python executable which precedes the script path and name. – elemakil Mar 11 '19 at 19:23
  • The Ubumtu 18.04 default python3 version (3.6) has a critical vulnerability now. Remediation option for this is, to upgrade upto Python 3.9.5. However, after upgrading, above two processors no longer works. Anyone have idea, is that safe to leave it like this? – hlesnt395 Jun 09 '21 at 13:55
1

As stated by @Elemakil above, these processes are probably not harmful. They run automatically to install updates. You could wait for the updates to finish but if you are in a hurry, you can kill the process by running:

sudo kill <Process PID>

then run:

sudo dpkg-reconfigure unattended-upgrades

and select No to disable automatic updates: Select No when prompted to allow automatic updates