PCRED(1)
π PCRED(1) β bestie edition π
okay so real talk, this is the manual page for pcred, from the General Commands Manual section, and it literally just prints process credentials. that's it. that's the whole vibe. let's get into it β¨
β¨ NAME β¨
pcred β print process credentials π«Ά
like. it prints credentials. of processes. iconic behavior honestly.
πΈ SYNOPSIS πΈ
pcred [-a] [pid | core]...
yes queen, that's the whole thing. short, sweet, slay.
π DESCRIPTION π
So pcred prints the credentials of each process or process core file you hand it β and when we say credentials we mean the effective, real, saved, and filesystem UIDs and GIDs. all four flavors. no cap.
By default? Here's the cute part: if the effective, real, saved-set, and filesystem user (group) IDs are all identical, they get printed in condensed form as e/r/s/fsuid (or e/r/s/fsgid for groups, obvi). But if they're not identical, pcred prints them individually, one by one, because it's not gonna lie to you bestie.
Supplementary groups are also displayed. yes, all of them. we're thorough here π
β¨ OPTIONS β¨
-a,--allβ Report all credential information separately. By default, if the effective, real, saved-set, and filesystem user (group) IDs are identical, they are reported in condensed form. so-ais the "no, show me EVERYTHING separately" button. main character energy fr fr.
π OPERANDS π
pidβ Process ID list. And get this: a/proc/pidpath may also be used, which means shell expansions like/proc/*will totally target all processes on the system. that's a lot of processes bestie, just saying. π¦coreβ Process core file, as produced bysystemd-coredump(8), or an Ubuntu/Debian apport.crashfile. For systemd core files, the file does not need to exist on disk β if it has been removed, the corresponding systemd journal entry will be used instead. See NOTES below π
π EXIT STATUS π
0on success π- non-zero if an error occurs β like no such process, permission denied, or invalid option. yeah. those. π
π FILES π
/proc/pid/*β Process information and control files.
π§ NOTES π§
okay this is the part where it gets kinda unhinged (affectionate).
When a core file has been removed by systemd-tmpfiles(8) or by storage limits configured in coredump.conf(5), the systemd-coredump(8) journal entry for the crash may still be available. so in this case, the path to the deleted core file can be passed as the core operand even though the file no longer exists on disk, and process metadata will be retrieved from the journal entry instead. the file is gone but the lore remains. β¨
Use coredumpctl(1) to obtain the path of a missing core file, e.g.:
coredumpctl list <name> -F COREDUMP_FILENAME
Ubuntu/Debian apport .crash files are also supported π«Ά These files use Debian control syntax with base64-encoded gzip core dumps. Text fields (such as ProcCmdline, ProcEnviron, and ExecutablePath) are mapped to COREDUMP_* fields, and the core dump is extracted on first access.
π SEE ALSO π
pfiles(1), coredumpctl(1), proc(5), credentials(7)
like, go read those too. they're giving reference material. iykyk π
and that's the whole page bestie!! this was pcred 0.2.23, dated September 2026, and honestly? she ate. go print some credentials. slay π β¨π
π¦ where this page comes from
- fedora 44: ptools 0.2.23-1.fc44 Β· Apache-2.0 AND MIT
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms