41

I want to kill all running processes of a particular user from either a shell script or native code on a Linux system.

Do I have to read the /proc directory and look for these?

Any ideas? Is there a dynamic mapping of the pids under UIDs in Linux? Isn't this in the proc?

If not, then where is this list maintained? Should I read from it? Also where is the static list of all UIDs in the system so I can validate this this user exists and then proceed to kill all processes running under it?

migrated from stackoverflow.com Aug 4 '11 at 13:21

This question came from our site for professional and enthusiast programmers.

  • 6
    Do you want a tool to do this (pkill, slay, others exist), or do you want to write it yourself? If the former, the superuser stack exchange site is probably better. If the latter, scanning /proc and making a note for all processes by a specific user is the way to go. The source code for the pkill utility would, for example, show how to do that. – Lars Wirzenius Aug 4 '11 at 10:12
  • Could you clarify what this question was about in light of @LarsWirzenius's comment? Thanks! – Caleb Aug 4 '11 at 14:03
  • @Caleb: I wanted to kill processes by reading the /proc as I didn't know of any tool doing it. Also now I find that other than "kill", "pkill", "skill" etc are not available on my system. In that case I guess I have to look at shell script alternatives to read the /proc and figure out a way to get processes under one user. Any ideas? – user489152 Aug 4 '11 at 14:51
  • 1
    Regarding “the static list of all UIDs … so I can validate this this user exists”: there is no such thing as validating a user ID. User names come from a database, but user IDs are whatever a process running setuid() chooses. – Gilles 'SO- stop being evil' Aug 4 '11 at 17:04
53

Use pkill -U UID or pkill -u UID or username instead of UID. Sometimes skill -u USERNAME may work, another tool is killall -u USERNAME.

Skill was a linux-specific and is now outdated, and pkill is more portable (Linux, Solaris, BSD).

pkill allow both numberic and symbolic UIDs, effective and real http://man7.org/linux/man-pages/man1/pkill.1.html

pkill - ... signal processes based on name and other attributes

    -u, --euid euid,...
         Only match processes whose effective user ID is listed.
         Either the numerical or symbolical value may be used.
    -U, --uid uid,...
         Only match processes whose real user ID is listed.  Either the
         numerical or symbolical value may be used.

Man page of skill says is it allowed only to use username, not user id: http://man7.org/linux/man-pages/man1/skill.1.html

skill, snice ... These tools are obsolete and unportable. The command syntax is poorly defined. Consider using the killall, pkill

  -u, --user user
         The next expression is a username.

killall is not marked as outdated in Linux, but it also will not work with numberic UID; only username: http://man7.org/linux/man-pages/man1/killall.1.html

killall - kill processes by name

   -u, --user
         Kill only processes the specified user owns.  Command names
         are optional.

I think, any utility used to find process in Linux/Solaris style /proc (procfs) will use full list of processes (doing some readdir of /proc). I think, they will iterate over /proc digital subfolders and check every found process for match.

To get list of users, use getpwent (it will get one user per call).

skill (procps & procps-ng) and killall (psmisc) tools both uses getpwnam library call to parse argument of -u option, and only username will be parsed. pkill (procps & procps-ng) uses both atol and getpwnam to parse -u/-U argument and allow both numeric and textual user specifier.

  • 1
    pkill is not obsolete. It may be unportable outside Linux, but the question was about Linux specifically. – Lars Wirzenius Aug 4 '11 at 10:11
  • 1
    to get the list of users use the one liner: getent passwd | awk -F: '{print $1}' – Petesh Aug 4 '11 at 10:58
  • what about I give a command like: "kill -ju UID" from C system() call? – user489152 Aug 4 '11 at 12:07
  • 1
    is it an embedded linux? you have no skill, pkill and killall? Even busybox embedded shell has pkill and killall. – osgx Aug 4 '11 at 15:01
  • 2
    killall -u USERNAME worked like charm – michalzuber Apr 23 '15 at 7:47
8

If you pass -1 as the process ID argument to either the kill shell command or the kill C function, then the signal is sent to all the processes it can reach, which in practice means all the processes of the user running the kill command or syscall.

su -c 'kill -TERM -1' bob

In C (error checking omitted):

if (fork() == 0) {
    setuid(uid);
    signal(SIGTERM, SIG_DFL);
    kill(-1, SIGTERM);
}
5

If the pkill function is unavailable on your UNIX / Linux distribution you could run the following command as the root user:

ps -ef | grep username | grep -v grep | awk '{print $2}' | xargs kill

where username is the user who's processes you want to delete

  • or just the pkill -U username. – osgx Aug 4 '11 at 12:49
2
pgrep -U username|xargs kill -9
0

This has worked nicely for me. You can find all the pid's of the processes by username by doing ps U <username> and go from there. Try this:

ps U <username> | cut -d " " -f 1 | xargs kill

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.