I have a fairly long-serving Ubuntu 18.04 LTS desktop computer onto which I have installed a great many apt packages from mainstream and non-mainstream repositories as well as numerous random tarballs built from source over the years.
Recently, shortly (minutes, not seconds) after a new boot & GUI login, I have been seeing a graphical "sudo" prompt asking for privileges for "/bin/sh."
This isn't occurring in response to any particular GUI or terminal process I'm running, so I believe this is a process spun up by either cron or init -- but I don't know what it is, so I am loathe to give it sudo. (If I ignore it or "cancel" it, nothing I care about seems to stop working or fail.)
Since I'm in a multitasking environment here and can open a new window, I've tried looking at "ps" and "htop" to try to figure out what's prompting me for the sudo password, but I can't tell. (Too many processes and no clear indication of which of them are blocking on whatever call that is.)
How can I determine, when I have an open sudo prompt in my Nautilus/Gnome GUI, what particular program is trying to get those perms from me?