checkrestart

checkrestart [options]

checkrestart identifies processes that are still using old (deleted) versions of libraries after upgrades. When system libraries are updated, running processes continue using the old versions loaded in memory. This tool finds these processes so they can be restarted to use the new libraries.
After package updates, especially security patches, critical services may still run vulnerable code until restarted. checkrestart scans **/proc/*/maps** for references to deleted library files and reports affected processes with suggested restart commands.
The tool integrates with system init systems to suggest appropriate service restart commands (systemctl restart, service restart). For non-service processes, it reports the process name and PID.

-v, --verbose

Verbose output, enables -f and shows reasons for exclusions.

List the deleted files and which program is using them.

Include debugging details in output, enables -v.

Terse single-line output suitable for Nagios and similar monitoring tools.

Machine-readable output; each line is tab-separated.

Only report processes that belong to a package.

Prevent exclude.conf and local-exclude.conf from being read.

Do not use lsof(8) even if available.

Ignore services associated with the matching package name.

Exclude items matching the pattern (types: package, unit, program, pid, file).

Exclude processes with this PID.

Ignore deleted files matching patterns in FILE.

Display help information.

Requires root privileges to scan all processes. Some processes may be difficult to restart safely (X server, session manager). The tool cannot detect all cases where restart is needed. Kernel updates require a full reboot, not just process restart.

checkrestart is part of the debian-goodies package, a collection of utilities for Debian systems. It was created to help system administrators identify which services need restarting after library updates, a common concern in security-conscious environments. Similar functionality exists in other tools like needs-restarting in the Red Hat ecosystem.

needrestart(1), lsof(8), apt(8), needs-restarting(1)