Python process to dump the environment variables from a processes memory. (/proc/$$/environ only captures process start)

dump_process_variables.py

import sys
import os
import pprint
import pathlib
import subprocess
import logging
import re

def get_local_envvars_pid(process_id):
    gdb_script = "set variable $envs = (char **) environ\nset $i = 0\nwhile ($envs[$i] != 0)\nprint $envs[$i++]\nend\nquit\n"
    pathlib.Path("/tmp/getenv.gdb").write_text(gdb_script)
    gdb_command = f"gdb -batch -x /tmp/getenv.gdb -p {process_id}"
    ph = subprocess.Popen(gdb_command.split(),stdout=subprocess.PIPE, stderr=subprocess.PIPE)
    out,err = ph.communicate()
    log.debug(f"gdb environment variable output {out} errors {err}")
    try:
        found_items = re.findall(r'\$\d+\s+=\s+[0-9a-fx]+\s+"(\S+)=(.+)"\n', out.decode())
    except:
        log.exception("Unable to decode environment varaibles.")
        return None
    finally:
        pathlib.Path("/tmp/getenv.gdb").unlink()
    return dict(found_items)


log = logging.getLogger("dump_envs")
handler = logging.StreamHandler(stream=sys.stdout)
#handler.setFormatter(logging.Formatter(logging.BASIC_FORMAT))
log.setLevel(logging.INFO)
log.addHandler(handler)

if not os.getresuid()[0]==0:
    log.error("You must run this process with root permissions for it to work properly."+str(os.getresuid()))
    sys.exit(1)

if len(sys.argv) < 2:
    log.error("You must pass a process id number.")
    sys.exit(1)

result = get_local_envvars_pid(sys.argv[1])
log.info(str(result))