diff --git a/detection/persistence/unexpected-active-systemd-units.sql b/detection/persistence/unexpected-active-systemd-units.sql index 35369c1..e0b43a3 100644 --- a/detection/persistence/unexpected-active-systemd-units.sql +++ b/detection/persistence/unexpected-active-systemd-units.sql @@ -23,7 +23,7 @@ SELECT ',', user, ',', - (file.size / 100) * 100 + (file.size / 225) * 225 ) AS exception_key FROM systemd_units @@ -46,406 +46,371 @@ WHERE ) AND ( exception_key IN ( - 'abrtd.service,ABRT Automated Bug Reporting Tool,,400', - 'abrt-journal-core.service,Creates ABRT problems from coredumpctl messages,,200', - 'abrt-oops.service,ABRT kernel log watcher,,200', - 'abrt-xorg.service,ABRT Xorg log watcher,,200', - 'accounts-daemon.service,Accounts Service,,1900', - 'accounts-daemon.service,Accounts Service,,2100', - 'accounts-daemon.service,Accounts Service,,700', - 'acpid.path,ACPI Events Check,,100', - 'acpid.service,ACPI Daemon,,1100', - 'acpid.service,ACPI event daemon,,200', - 'acpid.socket,ACPID Listen Socket,,100', + 'abrtd.service,ABRT Automated Bug Reporting Tool,,450', + 'abrt-journal-core.service,Creates ABRT problems from coredumpctl messages,,225', + 'abrt-oops.service,ABRT kernel log watcher,,225', + 'abrt-xorg.service,ABRT Xorg log watcher,,225', + 'accounts-daemon.service,Accounts Service,,1800', + 'accounts-daemon.service,Accounts Service,,675', + 'acpid.path,ACPI Events Check,,0', + 'acpid.service,ACPI Daemon,,1125', + 'acpid.service,ACPI event daemon,,225', + 'acpid.socket,ACPID Listen Socket,,0', 'akmods-keygen.target,akmods-keygen.target,,0', - 'akmods.service,Builds and install new kmods from akmod packages,,300', - 'alsa-restore.service,Save/Restore Sound Card State,,400', - 'alsa-restore.service,Save/Restore Sound Card State,,600', - 'alsa-state.service,Manage Sound Card State (restore and store),,400', - 'alsa-store.service,Store Sound Card State,,1200', - 'anacron.service,Run anacron jobs,,700', - 'anacron.timer,Trigger anacron every hour,,100', - 'apcupsd.service,APC UPS Power Control Daemon for Linux,,300', - 'apparmor.service,Load AppArmor profiles,,1100', - 'apport-autoreport.path,Process error reports when automatic reporting is enabled (file watch),,200', - 'apport-autoreport.timer,Process error reports when automatic reporting is enabled (timer based),,200', - 'apport.service,LSB: automatic crash report generation,,500', - 'apt-daily.service,Daily apt download activities,,300', - 'apt-daily.timer,Daily apt download activities,,100', - 'apt-daily-upgrade.timer,Daily apt upgrade and clean activities,,100', + 'akmods.service,Builds and install new kmods from akmod packages,,225', + 'alsa-restore.service,Save/Restore Sound Card State,,225', + 'alsa-restore.service,Save/Restore Sound Card State,,450', + 'alsa-state.service,Manage Sound Card State (restore and store),,450', + 'alsa-store.service,Store Sound Card State,,1125', + 'anacron.service,Run anacron jobs,,675', + 'anacron.timer,Trigger anacron every hour,,0', + 'apcupsd.service,APC UPS Power Control Daemon for Linux,,225', + 'apparmor.service,Load AppArmor profiles,,1125', + 'apport-autoreport.path,Process error reports when automatic reporting is enabled (file watch),,0', + 'apport-autoreport.timer,Process error reports when automatic reporting is enabled (timer based),,0', + 'apport.service,LSB: automatic crash report generation,,450', + 'apt-daily.service,Daily apt download activities,,225', + 'apt-daily.timer,Daily apt download activities,,0', + 'apt-daily-upgrade.timer,Daily apt upgrade and clean activities,,0', 'archlinux-keyring-wkd-sync.service,Refresh existing keys of archlinux-keyring,,900', - 'archlinux-keyring-wkd-sync.timer,Refresh existing PGP keys of archlinux-keyring regularly,,100', - 'atd.service,Deferred execution scheduler,,200', - 'auditd.service,Security Auditing Service,,1700', - 'audit.service,Kernel Auditing,,1200', - 'avahi-daemon.service,Avahi mDNS/DNS-SD Stack,,1000', - 'avahi-daemon.socket,Avahi mDNS/DNS-SD Stack Activation Socket,,800', + 'archlinux-keyring-wkd-sync.timer,Refresh existing PGP keys of archlinux-keyring regularly,,0', + 'atd.service,Deferred execution scheduler,,225', + 'auditd.service,Security Auditing Service,,1575', + 'audit.service,Kernel Auditing,,1125', + 'avahi-daemon.service,Avahi mDNS/DNS-SD Stack,,900', + 'avahi-daemon.socket,Avahi mDNS/DNS-SD Stack Activation Socket,,675', 'basic.target,Basic System,,900', - 'blk-availability.service,Availability of block devices,,300', - "blockdev@dev-mapper-cryptdata.target,Block Device Preparation for /dev/mapper/cryptdata,,400", - 'blockdev@dev-mapper-cryptoswap.target,Block Device Preparation for /dev/mapper/cryptoswap,,400', - "blockdev@dev-mapper-cryptswap.target,Block Device Preparation for /dev/mapper/cryptswap,,400", - 'blueman-mechanism.service,Bluetooth management mechanism,,100', - 'bluetooth.service,Bluetooth service,,700', - 'bluetooth.target,Bluetooth Support,,400', - 'bolt.service,Thunderbolt system service,,600', - 'chronyd.service,NTP client/server,,1500', - "chrony.service,chrony, an NTP client/server,,1600", - 'colord.service,Manage, Install and Generate Color Profiles,colord,200', - "com.system76.PowerDaemon.service,System76 Power Daemon,,200", - "com.system76.Scheduler.service,Automatically configure CPU scheduler for responsiveness on AC,,200", - 'console-setup.service,Set console font and keymap,,300', - 'containerd.service,containerd container runtime,,1200', - 'crond.service,Command Scheduler,,300', - 'cronie.service,Periodic Command Scheduler,,100', - 'cron.service,Regular background program processing daemon,,300', - 'cryptsetup.target,Local Encrypted Volumes,,400', - 'cups-browsed.service,Make remote CUPS printers available locally,,200', - 'cups.path,CUPS Scheduler,,100', - 'cups.service,CUPS Scheduler,,200', - 'cups.service,CUPS Scheduler,,300', - 'cups.socket,CUPS Scheduler,,100', - "dbus-:1.2-org.pop_os.transition_system@0.service,dbus-:1.2-org.pop_os.transition_system@0.service,0,200", - 'dbus-broker.service,D-Bus System Message Bus,,500', - 'dbus.service,D-Bus System Message Bus,,400', - 'dbus.service,D-Bus System Message Bus,,500', - 'dbus.socket,D-Bus System Message Bus Socket,,100', - 'dhcpcd.service,DHCP Client,,1700', - 'display-manager.service,X11 Server,,1700', - 'dkms.service,Builds and install new kernel modules through DKMS,,200', - 'dm-event.socket,Device-mapper event daemon FIFOs,,200', - 'dnf-automatic-install.service,dnf automatic install updates,,300', - 'dnf-automatic-install.timer,dnf-automatic-install timer,,200', - 'dnf-makecache.service,dnf makecache,,400', - 'dnf-makecache.timer,dnf makecache --timer,,300', - 'docker.service,Docker Application Container Engine,,1100', - 'docker.service,Docker Application Container Engine,,1200', - 'docker.service,Docker Application Container Engine,,1300', - 'docker.service,Docker Application Container Engine,,1700', - 'docker.socket,Docker Socket for the API,,100', - 'docker.socket,Docker Socket for the API,,200', - 'dpkg-db-backup.timer,Daily dpkg database backup timer,,100', - 'dracut-shutdown.service,Restore /run/initramfs on shutdown,,400', - 'dracut-shutdown.service,Restore /run/initramfs on shutdown,,500', - 'e2scrub_all.timer,Periodic ext4 Online Metadata Check for All Filesystems,,200', - "finalrd.service,Create final runtime dir for shutdown pivot root,,400", - 'firewalld.service,firewalld - dynamic firewall daemon,,600', - 'firewall.service,Firewall,,1500', - 'flatpak-system-helper.service,flatpak system helper,,200', - 'fprintd.service,Fingerprint Authentication Daemon,,800', + 'blk-availability.service,Availability of block devices,,225', + "blockdev@dev-mapper-cryptdata.target,Block Device Preparation for /dev/mapper/cryptdata,,225", + 'blockdev@dev-mapper-cryptoswap.target,Block Device Preparation for /dev/mapper/cryptoswap,,225', + "blockdev@dev-mapper-cryptswap.target,Block Device Preparation for /dev/mapper/cryptswap,,225", + 'bluetooth.service,Bluetooth service,,675', + 'bluetooth.target,Bluetooth Support,,225', + 'bolt.service,Thunderbolt system service,,450', + 'chronyd.service,NTP client/server,,1350', + "chrony.service,chrony, an NTP client/server,,1575", + 'colord.service,Manage, Install and Generate Color Profiles,colord,225', + "com.system76.PowerDaemon.service,System76 Power Daemon,,225", + "com.system76.Scheduler.service,Automatically configure CPU scheduler for responsiveness on AC,,225", + 'console-setup.service,Set console font and keymap,,225', + 'containerd.service,containerd container runtime,,1125', + 'crond.service,Command Scheduler,,225', + 'cronie.service,Periodic Command Scheduler,,0', + 'cron.service,Regular background program processing daemon,,225', + 'cryptsetup.target,Local Encrypted Volumes,,225', + 'cups-browsed.service,Make remote CUPS printers available locally,,225', + 'cups.path,CUPS Scheduler,,0', + 'cups.service,CUPS Scheduler,,225', + 'cups.socket,CUPS Scheduler,,0', + "dbus-:1.2-org.pop_os.transition_system@0.service,dbus-:1.2-org.pop_os.transition_system@0.service,0,225", + 'dbus-broker.service,D-Bus System Message Bus,,450', + 'dbus.service,D-Bus System Message Bus,,225', + 'dbus.service,D-Bus System Message Bus,,450', + 'dbus.socket,D-Bus System Message Bus Socket,,0', + 'dhcpcd.service,DHCP Client,,1575', + 'display-manager.service,X11 Server,,1575', + 'dkms.service,Builds and install new kernel modules through DKMS,,225', + 'dm-event.socket,Device-mapper event daemon FIFOs,,0', + 'dm-event.socket,Device-mapper event daemon FIFOs,,225', + 'dnf-automatic-install.service,dnf automatic install updates,,225', + 'dnf-automatic-install.timer,dnf-automatic-install timer,,225', + 'dnf-makecache.service,dnf makecache,,225', + 'dnf-makecache.timer,dnf makecache --timer,,225', + 'docker.service,Docker Application Container Engine,,1125', + 'docker.service,Docker Application Container Engine,,1350', + 'docker.service,Docker Application Container Engine,,1575', + 'docker.socket,Docker Socket for the API,,0', + 'docker.socket,Docker Socket for the API,,225', + 'dpkg-db-backup.timer,Daily dpkg database backup timer,,0', + 'dracut-shutdown.service,Restore /run/initramfs on shutdown,,225', + 'dracut-shutdown.service,Restore /run/initramfs on shutdown,,450', + 'e2scrub_all.timer,Periodic ext4 Online Metadata Check for All Filesystems,,225', + "finalrd.service,Create final runtime dir for shutdown pivot root,,225", + 'firewalld.service,firewalld - dynamic firewall daemon,,450', + 'firewall.service,Firewall,,1350', + 'flatpak-system-helper.service,flatpak system helper,,225', 'fprintd.service,Fingerprint Authentication Daemon,,900', - 'fstrim.service,Discard unused blocks on filesystems from /etc/fstab,,400', - 'fstrim.timer,Discard unused blocks once a week,,200', - 'fwupd-refresh.service,Refresh fwupd metadata and update motd,fwupd-refresh,400', - 'fwupd-refresh.timer,Refresh fwupd metadata regularly,,100', - 'fwupd.service,Firmware update daemon,,600', - 'gdm.service,GNOME Display Manager,,800', + 'fstrim.service,Discard unused blocks on filesystems from /etc/fstab,,225', + 'fstrim.timer,Discard unused blocks once a week,,225', + 'fwupd-refresh.service,Refresh fwupd metadata and update motd,fwupd-refresh,225', + 'fwupd-refresh.timer,Refresh fwupd metadata regularly,,0', + 'fwupd.service,Firmware update daemon,,450', 'gdm.service,GNOME Display Manager,,900', - 'geoclue.service,Location Lookup Service,geoclue,400', - 'getty-pre.target,Preparation for Logins,,500', - 'getty.target,Login Prompts,,500', - 'graphical.target,Graphical Interface,,600', - 'gssproxy.service,GSSAPI Proxy Daemon,,400', - "ifupdown-pre.service,Helper to synchronize boot up for ifupdown,,400", - 'iio-sensor-proxy.service,IIO Sensor Proxy service,,400', - 'import-state.service,Import network configuration from initramfs,,400', - 'integritysetup.target,Local Integrity Protected Volumes,,400', - 'irqbalance.service,irqbalance daemon,,400', - 'irqbalance.service,irqbalance daemon,,500', - 'iscsid.socket,Open-iSCSI iscsid Socket,,100', - 'iscsiuio.socket,Open-iSCSI iscsiuio Socket,,100', - 'iwd.service,Wireless service,,500', - 'iwd.service,Wireless service,,600', - 'kerneloops.service,Tool to automatically collect and submit kernel crash signatures,kernoops,300', - 'keyboard-setup.service,Set the console keyboard layout,,200', - 'kmod-static-nodes.service,Create List of Static Device Nodes,,700', + 'geoclue.service,Location Lookup Service,geoclue,450', + 'getty-pre.target,Preparation for Logins,,450', + 'getty.target,Login Prompts,,450', + 'graphical.target,Graphical Interface,,450', + 'gssproxy.service,GSSAPI Proxy Daemon,,450', + "ifupdown-pre.service,Helper to synchronize boot up for ifupdown,,225", + 'iio-sensor-proxy.service,IIO Sensor Proxy service,,225', + 'import-state.service,Import network configuration from initramfs,,225', + 'integritysetup.target,Local Integrity Protected Volumes,,225', + 'irqbalance.service,irqbalance daemon,,450', + 'iscsid.socket,Open-iSCSI iscsid Socket,,0', + 'iscsiuio.socket,Open-iSCSI iscsiuio Socket,,0', + 'iwd.service,Wireless service,,450', + 'kerneloops.service,Tool to automatically collect and submit kernel crash signatures,kernoops,225', + 'keyboard-setup.service,Set the console keyboard layout,,225', + 'kmod-static-nodes.service,Create List of Static Device Nodes,,675', 'kolide-launcher.service,Kolide launcher,,1800', - 'kolide-launcher.service,Kolide launcher,,1900', - 'launcher.kolide-k2.service,The Kolide Launcher,,200', - 'ldconfig.service,Rebuild Dynamic Linker Cache,,600', - 'ldconfig.service,Rebuild Dynamic Linker Cache,,700', - 'libvirtd-admin.socket,Libvirt admin socket,,200', - 'libvirtd-ro.socket,Libvirt local read-only socket,,200', - 'libvirtd.service,Virtualization daemon,,1900', - 'libvirtd.socket,Libvirt local socket,,200', - 'lightdm.service,Light Display Manager,,300', - 'livesys-late.service,SYSV: Late init script for live image.,,500', - 'livesys.service,LSB: Init script for live image.,,500', - 'lm_sensors.service,Hardware Monitoring Sensors,,400', - 'lm_sensors.service,Initialize hardware monitoring sensors,,300', - 'local-fs-pre.target,Preparation for Local File Systems,,400', - 'local-fs.target,Local File Systems,,500', - 'logrotate-checkconf.service,Logrotate configuration check,,1100', - 'logrotate.timer,Daily rotation of log files,,100', + 'launcher.kolide-k2.service,The Kolide Launcher,,225', + 'ldconfig.service,Rebuild Dynamic Linker Cache,,675', + 'libvirtd-admin.socket,Libvirt admin socket,,225', + 'libvirtd-ro.socket,Libvirt local read-only socket,,225', + 'libvirtd.service,Virtualization daemon,,1800', + 'libvirtd.socket,Libvirt local socket,,225', + 'lightdm.service,Light Display Manager,,225', + 'livesys-late.service,SYSV: Late init script for live image.,,450', + 'livesys.service,LSB: Init script for live image.,,450', + 'lm_sensors.service,Hardware Monitoring Sensors,,225', + 'lm_sensors.service,Initialize hardware monitoring sensors,,225', + 'local-fs-pre.target,Preparation for Local File Systems,,450', + 'local-fs.target,Local File Systems,,450', + 'logrotate-checkconf.service,Logrotate configuration check,,1125', + 'logrotate.timer,Daily rotation of log files,,0', 'logrotate.timer,logrotate.timer,,0', - 'low-memory-monitor.service,Low Memory Monitor,,600', - 'lvm2-lvmdbusd.service,LVM2 D-Bus service,,100', - 'lvm2-lvmpolld.socket,LVM2 poll daemon socket,,200', - 'lvm2-monitor.service,Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling,,500', - 'lvm2-monitor.service,Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling,,600', - 'machine-qemu\\x2d2\\x2dwin10.scope,Virtual Machine qemu-2-win10,,300', - 'machine.slice,Virtual Machine and Container Slice,,400', - 'machines.target,Containers,,400', - 'man-db.service,Daily man-db regeneration,root,700', - 'man-db.timer,Daily man-db regeneration,,100', - 'mcelog.service,Machine Check Exception Logging Daemon,,200', - 'mlocate-updatedb.timer,Updates mlocate database every day,,100', - 'ModemManager.service,Modem Manager,root,400', - 'ModemManager.service,Modem Manager,root,500', - 'modprobe@efi_pstore.service,Load Kernel Module efi_pstore,,500', - 'modprobe@pstore_blk.service,Load Kernel Module pstore_blk,,500', - 'modprobe@pstore_zone.service,Load Kernel Module pstore_zone,,500', - 'modprobe@ramoops.service,Load Kernel Module ramoops,,500', - 'monitorix.service,Monitorix,,300', - 'motd-news.timer,Message of the Day,,100', - 'mount-pstore.service,mount-pstore.service,,1100', - 'multi-user.target,Multi-User System,,500', - 'nessusd.service,The Nessus Vulnerability Scanner,,800', - 'netcf-transaction.service,Rollback uncommitted netcf network config change transactions,,300', - 'networkd-dispatcher.service,Dispatcher daemon for systemd-networkd,,200', - "networking.service,Raise network interfaces,,600", - 'network-interfaces.target,All Network Interfaces (deprecated),,100', - 'network-local-commands.service,Extra networking commands.,,1300', - 'NetworkManager-dispatcher.service,Network Manager Script Dispatcher Service,,300', - 'NetworkManager-dispatcher.service,Network Manager Script Dispatcher Service,,600', - 'NetworkManager-dispatcher.service,Network Manager Script Dispatcher Service,,700', - 'NetworkManager.service,Network Manager,,1300', - 'NetworkManager.service,Network Manager,,1400', - 'NetworkManager-wait-online.service,Network Manager Wait Online,,1100', - 'NetworkManager-wait-online.service,Network Manager Wait Online,,1200', - 'network-online.target,Network is Online,,400', - 'network-online.target,Network is Online,,500', - 'network-pre.target,Preparation for Network,,400', - 'network-pre.target,Preparation for Network,,500', - 'network-setup.service,Networking Setup,,1300', - 'network.target,Network,,400', - 'network.target,Network,,500', - 'nfs-client.target,NFS client services,,400', + 'low-memory-monitor.service,Low Memory Monitor,,675', + 'lvm2-lvmpolld.socket,LVM2 poll daemon socket,,0', + 'lvm2-lvmpolld.socket,LVM2 poll daemon socket,,225', + 'lvm2-monitor.service,Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling,,450', + 'machine.slice,Virtual Machine and Container Slice,,450', + 'machines.target,Containers,,225', + 'man-db.service,Daily man-db regeneration,root,675', + 'man-db.timer,Daily man-db regeneration,,0', + 'mcelog.service,Machine Check Exception Logging Daemon,,225', + 'mlocate-updatedb.timer,Updates mlocate database every day,,0', + 'ModemManager.service,Modem Manager,root,450', + 'modprobe@efi_pstore.service,Load Kernel Module efi_pstore,,450', + 'modprobe@pstore_blk.service,Load Kernel Module pstore_blk,,450', + 'modprobe@pstore_zone.service,Load Kernel Module pstore_zone,,450', + 'modprobe@ramoops.service,Load Kernel Module ramoops,,450', + 'monitorix.service,Monitorix,,225', + 'motd-news.timer,Message of the Day,,0', + 'mount-pstore.service,mount-pstore.service,,1125', + 'multi-user.target,Multi-User System,,450', + 'nessusd.service,The Nessus Vulnerability Scanner,,675', + 'netcf-transaction.service,Rollback uncommitted netcf network config change transactions,,225', + 'networkd-dispatcher.service,Dispatcher daemon for systemd-networkd,,225', + "networking.service,Raise network interfaces,,450", + 'network-interfaces.target,All Network Interfaces (deprecated),,0', + 'network-local-commands.service,Extra networking commands.,,1350', + 'NetworkManager-dispatcher.service,Network Manager Script Dispatcher Service,,675', + 'NetworkManager.service,Network Manager,,1125', + 'NetworkManager.service,Network Manager,,1350', + 'NetworkManager-wait-online.service,Network Manager Wait Online,,1125', + 'network-online.target,Network is Online,,450', + 'network-pre.target,Preparation for Network,,450', + 'network-setup.service,Networking Setup,,1350', + 'network.target,Network,,225', + 'network.target,Network,,450', + 'nfs-client.target,NFS client services,,225', 'nginx.service,Nginx Web Server,nginx,2400', - 'nix-daemon.service,Nix Daemon,,400', - 'nix-daemon.socket,Nix Daemon Socket,,200', + 'nix-daemon.service,Nix Daemon,,225', + 'nix-daemon.socket,Nix Daemon Socket,,225', 'nix-gc.timer,nix-gc.timer,,0', - 'nscd.service,Name Service Cache Daemon,nscd,1700', 'nscd.service,Name Service Cache Daemon,nscd,1800', - 'nss-lookup.target,Host and Network Name Lookups,,500', - 'nss-user-lookup.target,User and Group Name Lookups,,500', - 'nvidia-fallback.service,Fallback to nouveau as nvidia did not load,,400', - 'nvidia-persistenced.service,NVIDIA Persistence Daemon,,300', - 'nvidia-powerd.service,nvidia-powerd service,,100', - 'openvpn.service,OpenVPN service,,200', - 'packagekit.service,PackageKit Daemon,root,300', - 'paths.target,Path Units,,400', - 'pcscd.service,PC/SC Smart Card Daemon,,200', - 'pcscd.socket,PC/SC Smart Card Daemon Activation Socket,,100', - 'phpsessionclean.timer,Clean PHP session files every 30 mins,,100', - 'plocate-updatedb.service,Update the plocate database,,200', - 'plocate-updatedb.timer,Update the plocate database daily,,100', - 'plymouth-quit.service,Terminate Plymouth Boot Screen,,200', - 'plymouth-quit-wait.service,Hold until boot process finishes up,,200', - 'plymouth-read-write.service,Tell Plymouth To Write Out Runtime Data,,200', - 'plymouth-start.service,Show Plymouth Boot Screen,,500', - 'plymouth-start.service,Show Plymouth Boot Screen,,600', - 'polkit.service,Authorization Manager,,100', - 'polkit.service,Authorization Manager,,200', - 'power-profiles-daemon.service,Power Profiles daemon,,600', - 'power-profiles-daemon.service,Power Profiles daemon,,700', - 'proc-sys-fs-binfmt_misc.automount,Arbitrary Executable File Formats File System Automount Point,,700', - 'pwrstatd.service,The monitor UPS software.,,200', - 'qemu-kvm.service,QEMU KVM preparation - module, ksm, hugepages,,300', - 'raid-check.timer,Weekly RAID setup health check,,100', - 'reflector.service,Refresh Pacman mirrorlist with Reflector.,,1500', - 'reflector.timer,Refresh Pacman mirrorlist weekly with Reflector.,,100', - 'reload-systemd-vconsole-setup.service,Reset console on configuration changes,,1200', - 'remote-fs-pre.target,Preparation for Remote File Systems,,400', - 'remote-fs.target,Remote File Systems,,500', - "resolvconf-pull-resolved.path,resolvconf-pull-resolved.path,,100", - "resolvconf.service,Nameserver information manager,,300", - 'resolvconf.service,resolvconf update,,1100', - 'rngd.service,Hardware RNG Entropy Gatherer Daemon,,300', + 'nss-lookup.target,Host and Network Name Lookups,,450', + 'nss-user-lookup.target,User and Group Name Lookups,,450', + 'nvidia-fallback.service,Fallback to nouveau as nvidia did not load,,225', + 'nvidia-persistenced.service,NVIDIA Persistence Daemon,,225', + 'nvidia-powerd.service,nvidia-powerd service,,0', + 'openvpn.service,OpenVPN service,,225', + 'packagekit.service,PackageKit Daemon,root,225', + 'paths.target,Path Units,,225', + 'pcscd.service,PC/SC Smart Card Daemon,,225', + 'pcscd.socket,PC/SC Smart Card Daemon Activation Socket,,0', + 'phpsessionclean.timer,Clean PHP session files every 30 mins,,0', + 'plocate-updatedb.service,Update the plocate database,,225', + 'plocate-updatedb.timer,Update the plocate database daily,,0', + 'plymouth-quit.service,Terminate Plymouth Boot Screen,,225', + 'plymouth-quit-wait.service,Hold until boot process finishes up,,0', + 'plymouth-read-write.service,Tell Plymouth To Write Out Runtime Data,,225', + 'plymouth-start.service,Show Plymouth Boot Screen,,450', + 'polkit.service,Authorization Manager,,0', + 'polkit.service,Authorization Manager,,225', + 'power-profiles-daemon.service,Power Profiles daemon,,675', + 'proc-sys-fs-binfmt_misc.automount,Arbitrary Executable File Formats File System Automount Point,,675', + 'pwrstatd.service,The monitor UPS software.,,225', + 'qemu-kvm.service,QEMU KVM preparation - module, ksm, hugepages,,225', + 'raid-check.timer,Weekly RAID setup health check,,0', + 'reflector.service,Refresh Pacman mirrorlist with Reflector.,,1350', + 'reflector.timer,Refresh Pacman mirrorlist weekly with Reflector.,,0', + 'reload-systemd-vconsole-setup.service,Reset console on configuration changes,,1125', + 'remote-fs-pre.target,Preparation for Remote File Systems,,450', + 'remote-fs.target,Remote File Systems,,450', + "resolvconf-pull-resolved.path,resolvconf-pull-resolved.path,,0", + "resolvconf.service,Nameserver information manager,,225", + 'resolvconf.service,resolvconf update,,1125', + 'rngd.service,Hardware RNG Entropy Gatherer Daemon,,225', 'rpc_pipefs.target,rpc_pipefs.target,,0', - 'rpc-statd-notify.service,Notify NFS peers of a restart,,300', - 'rsyslog.service,System Logging Service,,400', - 'rsyslog.service,System Logging Service,,500', - 'rtkit-daemon.service,RealtimeKit Scheduling Policy Service,,1000', - 'setroubleshootd.service,SETroubleshoot daemon for processing new SELinux denial logs,setroubleshoot,200', - 'setvtrgb.service,Set console scheme,,300', - 'shadow.service,Verify integrity of password and group files,,300', + 'rpc-statd-notify.service,Notify NFS peers of a restart,,225', + 'rsyslog.service,System Logging Service,,225', + 'rsyslog.service,System Logging Service,,450', + 'rtkit-daemon.service,RealtimeKit Scheduling Policy Service,,900', + 'setroubleshootd.service,SETroubleshoot daemon for processing new SELinux denial logs,setroubleshoot,225', + 'setvtrgb.service,Set console scheme,,225', 'shadow.service,Verify integrity of password and group files,,900', - 'shadow.timer,Daily verification of password and group files,,100', - 'sleep.target,Sleep,,400', - '-.slice,Root Slice,,0', - 'slices.target,Slice Units,,400', - 'smartcard.target,Smart Card,,400', - 'smartd.service,Self Monitoring and Reporting Technology (SMART) Daemon,,400', - 'snapd.apparmor.service,Load AppArmor profiles managed internally by snapd,,800', - 'snapd.mounts-pre.target,Mounting snaps,,100', - 'snapd.mounts.target,Mounted snaps,,100', - 'snapd.seeded.service,Wait until snapd is fully seeded,,300', - 'snapd.service,Snap Daemon,,400', - 'snapd.service,Snap Daemon,,500', - 'snapd.socket,Socket activation for snappy daemon,,200', - 'snap.yubioath-desktop.pcscd.service,Service for snap application yubioath-desktop.pcscd,,500', - 'sockets.target,Socket Units,,400', - 'sound.target,Sound Card,,400', - 'sshd-keygen.target,sshd-keygen.target,,100', - 'sshd.service,OpenSSH Daemon,,200', - 'sshd.service,OpenSSH server daemon,,300', - 'sshd.service,SSH Daemon,,1600', - 'sssd-kcm.service,SSSD Kerberos Cache Manager,,400', - 'sssd-kcm.socket,SSSD Kerberos Cache Manager responder socket,,100', - 'swap.target,Swaps,,400', - 'switcheroo-control.service,Switcheroo Control Proxy service,,400', - 'sysinit.target,System Initialization,,500', - 'syslog.socket,Syslog Socket,,1400', - 'sysstat-collect.timer,Run system activity accounting tool every 10 minutes,,300', - 'sysstat.service,Resets System Activity Logs,root,400', - 'sysstat-summary.timer,Generate summary of yesterday''s process accounting,,300', - 'systemd-ask-password-console.path,Dispatch Password Requests to Console Directory Watch,,700', - 'systemd-ask-password-plymouth.path,Forward Password Requests to Plymouth Directory Watch,,400', - 'systemd-ask-password-plymouth.path,Forward Password Requests to Plymouth Directory Watch,,500', - 'systemd-ask-password-wall.path,Forward Password Requests to Wall Directory Watch,,600', - 'systemd-binfmt.service,Set Up Additional Binary Formats,,1100', - 'systemd-binfmt.service,Set Up Additional Binary Formats,,1200', - 'systemd-boot-update.service,Automatic Boot Loader Update,,600', - 'systemd-coredump.socket,Process Core Dump Socket,,500', + 'shadow.timer,Daily verification of password and group files,,0', + 'sleep.target,Sleep,,225', + 'slices.target,Slice Units,,450', + 'smartcard.target,Smart Card,,225', + 'smartd.service,Self Monitoring and Reporting Technology (SMART) Daemon,,225', + 'snapd.apparmor.service,Load AppArmor profiles managed internally by snapd,,675', + 'snapd.mounts-pre.target,Mounting snaps,,0', + 'snapd.mounts.target,Mounted snaps,,0', + 'snapd.seeded.service,Wait until snapd is fully seeded,,225', + 'snapd.service,Snap Daemon,,450', + 'snapd.socket,Socket activation for snappy daemon,,225', + 'snap.yubioath-desktop.pcscd.service,Service for snap application yubioath-desktop.pcscd,,450', + 'sockets.target,Socket Units,,225', + 'sound.target,Sound Card,,225', + 'sshd-keygen.target,sshd-keygen.target,,0', + 'sshd.service,OpenSSH Daemon,,225', + 'sshd.service,OpenSSH server daemon,,225', + 'sshd.service,SSH Daemon,,1575', + 'sssd-kcm.service,SSSD Kerberos Cache Manager,,225', + 'sssd-kcm.socket,SSSD Kerberos Cache Manager responder socket,,0', + 'swap.target,Swaps,,225', + 'switcheroo-control.service,Switcheroo Control Proxy service,,450', + 'sysinit.target,System Initialization,,450', + 'syslog.socket,Syslog Socket,,1350', + 'sysstat-collect.timer,Run system activity accounting tool every 10 minutes,,225', + 'sysstat.service,Resets System Activity Logs,root,225', + 'sysstat-summary.timer,Generate summary of yesterday''s process accounting,,225', + 'systemd-ask-password-console.path,Dispatch Password Requests to Console Directory Watch,,675', + 'systemd-ask-password-plymouth.path,Forward Password Requests to Plymouth Directory Watch,,225', + 'systemd-ask-password-plymouth.path,Forward Password Requests to Plymouth Directory Watch,,450', + 'systemd-ask-password-wall.path,Forward Password Requests to Wall Directory Watch,,450', + 'systemd-ask-password-wall.path,Forward Password Requests to Wall Directory Watch,,675', + 'systemd-binfmt.service,Set Up Additional Binary Formats,,1125', + 'systemd-boot-update.service,Automatic Boot Loader Update,,675', + 'systemd-coredump.socket,Process Core Dump Socket,,450', "systemd-cryptsetup@cryptdata.service,Cryptography Setup for cryptdata,,900", 'systemd-cryptsetup@cryptoswap.service,Cryptography Setup for cryptoswap,,900', - "systemd-cryptsetup@cryptswap.service,Cryptography Setup for cryptswap,,1100", - 'systemd-fsckd.socket,fsck to fsckd communication Socket,,500', - 'systemd-homed-activate.service,Home Area Activation,,600', - 'systemd-homed.service,Home Area Manager,,1300', - 'systemd-hostnamed.service,Hostname Service,,1100', - 'systemd-hostnamed.service,Hostname Service,,1200', - 'systemd-hwdb-update.service,Rebuild Hardware Database,,800', - 'systemd-initctl.socket,initctl Compatibility Named Pipe,,500', - 'systemd-journal-catalog-update.service,Rebuild Journal Catalog,,700', - 'systemd-journald-audit.socket,Journal Audit Socket,,600', - 'systemd-journald-dev-log.socket,Journal Socket (/dev/log),,1100', + "systemd-cryptsetup@cryptswap.service,Cryptography Setup for cryptswap,,1125", + 'systemd-fsckd.socket,fsck to fsckd communication Socket,,450', + 'systemd-homed-activate.service,Home Area Activation,,450', + 'systemd-homed.service,Home Area Manager,,1350', + 'systemd-hostnamed.service,Hostname Service,,1125', + 'systemd-hwdb-update.service,Rebuild Hardware Database,,675', + 'systemd-initctl.socket,initctl Compatibility Named Pipe,,450', + 'systemd-journal-catalog-update.service,Rebuild Journal Catalog,,675', + 'systemd-journald-audit.socket,Journal Audit Socket,,450', + 'systemd-journald-audit.socket,Journal Audit Socket,,675', + 'systemd-journald-dev-log.socket,Journal Socket (/dev/log),,1125', 'systemd-journald.service,Journal Service,,1800', - 'systemd-journald.service,Journal Service,,2000', + 'systemd-journald.service,Journal Service,,2025', 'systemd-journald.socket,Journal Socket,,900', - 'systemd-journal-flush.service,Flush Journal to Persistent Storage,,800', - 'systemd-localed.service,Locale Service,,1200', - 'systemd-logind.service,User Login Management,,2000', - 'systemd-logind.service,User Login Management,,2100', - 'systemd-machined.service,Virtual Machine and Container Registration Service,,1200', - 'systemd-machined.service,Virtual Machine and Container Registration Service,,1300', - 'systemd-modules-load.service,Load Kernel Modules,,1000', - 'systemd-network-generator.service,Generate network units from Kernel command line,,600', - 'systemd-network-generator.service,Generate network units from Kernel command line,,700', - 'systemd-oomd.service,Userspace Out-Of-Memory (OOM) Killer,systemd-oom,1600', - 'systemd-oomd.service,Userspace Out-Of-Memory (OOM) Killer,systemd-oom,1700', - 'systemd-oomd.socket,Userspace Out-Of-Memory (OOM) Killer Socket,,600', - 'systemd-random-seed.service,Load/Save Random Seed,,1100', - 'systemd-random-seed.service,Load/Save Random Seed,,1200', - 'systemd-remount-fs.service,Remount Root and Kernel File Systems,,700', - 'systemd-remount-fs.service,Remount Root and Kernel File Systems,,800', - 'systemd-resolved.service,Network Name Resolution,systemd-resolve,1700', - 'systemd-rfkill.socket,Load/Save RF Kill Switch Status /dev/rfkill Watch,,700', - 'systemd-suspend.service,System Suspend,,500', - 'systemd-sysctl.service,Apply Kernel Variables,,700', - 'systemd-sysusers.service,Create System Users,,1000', - 'systemd-sysusers.service,Create System Users,,1200', - 'systemd-timedated.service,Time & Date Service,,1100', - 'systemd-timesyncd.service,Network Time Synchronization,systemd-timesync,1700', + 'systemd-journal-flush.service,Flush Journal to Persistent Storage,,675', + 'systemd-localed.service,Locale Service,,1125', + 'systemd-logind.service,User Login Management,,1800', + 'systemd-logind.service,User Login Management,,2025', + 'systemd-machined.service,Virtual Machine and Container Registration Service,,1125', + 'systemd-machined.service,Virtual Machine and Container Registration Service,,1350', + 'systemd-modules-load.service,Load Kernel Modules,,900', + 'systemd-network-generator.service,Generate network units from Kernel command line,,450', + 'systemd-network-generator.service,Generate network units from Kernel command line,,675', + 'systemd-oomd.service,Userspace Out-Of-Memory (OOM) Killer,systemd-oom,1575', + 'systemd-oomd.socket,Userspace Out-Of-Memory (OOM) Killer Socket,,450', + 'systemd-pcrphase.service,TPM2 PCR Barrier (User),,675', + 'systemd-pcrphase-sysinit.service,TPM2 PCR Barrier (Initialization),,675', + 'systemd-random-seed.service,Load/Save OS Random Seed,,1125', + 'systemd-random-seed.service,Load/Save Random Seed,,1125', + 'systemd-remount-fs.service,Remount Root and Kernel File Systems,,675', + 'systemd-resolved.service,Network Name Resolution,systemd-resolve,1575', + 'systemd-rfkill.socket,Load/Save RF Kill Switch Status /dev/rfkill Watch,,675', + 'systemd-suspend.service,System Suspend,,450', + 'systemd-sysctl.service,Apply Kernel Variables,,675', + 'systemd-sysusers.service,Create System Users,,900', + 'systemd-timedated.service,Time & Date Service,,1125', + 'systemd-timesyncd.service,Network Time Synchronization,systemd-timesync,1575', 'systemd-timesyncd.service,Network Time Synchronization,systemd-timesync,1800', - 'systemd-tmpfiles-clean.timer,Daily Cleanup of Temporary Directories,,500', - 'systemd-tmpfiles-setup-dev.service,Create Static Device Nodes in /dev,,700', - 'systemd-tmpfiles-setup-dev.service,Create Static Device Nodes in /dev,,800', - 'systemd-tmpfiles-setup.service,Create Volatile Files and Directories,,700', - 'systemd-tmpfiles-setup.service,Create Volatile Files and Directories,,800', + 'systemd-tmpfiles-clean.timer,Daily Cleanup of Temporary Directories,,450', + 'systemd-tmpfiles-setup-dev.service,Create Static Device Nodes in /dev,,675', + 'systemd-tmpfiles-setup.service,Create Volatile Files and Directories,,675', 'systemd-tmpfiles-setup.service,Create Volatile Files and Directories,,900', - 'systemd-udevd-control.socket,udev Control Socket,,600', - 'systemd-udevd-kernel.socket,udev Kernel Socket,,600', - 'systemd-udevd.service,Rule-based Manager for Device Events and Files,,1200', - 'systemd-udevd.service,Rule-based Manager for Device Events and Files,,1300', - 'systemd-udev-settle.service,Wait for udev To Complete Device Initialization,,800', - 'systemd-udev-trigger.service,Coldplug All udev Devices,,700', - 'systemd-update-done.service,Update is Completed,,600', - 'systemd-update-done.service,Update is Completed,,700', - 'systemd-update-utmp.service,Record System Boot/Shutdown in UTMP,,700', - 'systemd-update-utmp.service,Record System Boot/Shutdown in UTMP,,800', + 'systemd-udevd-control.socket,udev Control Socket,,450', + 'systemd-udevd-kernel.socket,udev Kernel Socket,,450', + 'systemd-udevd.service,Rule-based Manager for Device Events and Files,,1125', + 'systemd-udevd.service,Rule-based Manager for Device Events and Files,,1350', + 'systemd-udev-settle.service,Wait for udev To Complete Device Initialization,,675', + 'systemd-udev-trigger.service,Coldplug All udev Devices,,675', + 'systemd-update-done.service,Update is Completed,,675', + 'systemd-update-utmp.service,Record System Boot/Shutdown in UTMP,,675', 'systemd-update-utmp.service,Record System Boot/Shutdown in UTMP,,900', - 'systemd-userdbd.service,User Database Manager,,1100', - 'systemd-userdbd.socket,User Database Manager Socket,,600', - 'systemd-user-sessions.service,Permit User Sessions,,600', - 'systemd-user-sessions.service,Permit User Sessions,,700', - 'systemd-vconsole-setup.service,Setup Virtual Console,,600', - 'systemd-vconsole-setup.service,Setup Virtual Console,,700', + 'systemd-userdbd.service,User Database Manager,,1125', + 'systemd-userdbd.socket,User Database Manager Socket,,675', + 'systemd-user-sessions.service,Permit User Sessions,,450', + 'systemd-user-sessions.service,Permit User Sessions,,675', + 'systemd-vconsole-setup.service,Setup Virtual Console,,450', + 'systemd-vconsole-setup.service,Setup Virtual Console,,675', 'system.slice,System Slice,,0', - 'tailscaled.service,Tailscale node agent,,600', - 'tailscaled.service,Tailscale node agent,,700', - 'tailscaled.service,Tailscale node agent,,800', - 'thermald.service,Thermal Daemon Service,,300', - 'timers.target,Timer Units,,400', - 'time-set.target,System Time Set,,400', - "time-sync.target,System Time Synchronized,,400", - 'tlp.service,TLP system startup/shutdown,,500', - "touchegg.service,Touchégg Daemon,,200", - 'ua-timer.timer,Ubuntu Advantage Timer for running repeated jobs,,100', - 'udisks2.service,Disk Manager,,200', - 'ufw.service,Uncomplicated firewall,,300', - 'unattended-upgrades.service,Unattended Upgrades Shutdown,,300', - 'unbound-anchor.timer,daily update of the root trust anchor for DNSSEC,,300', - 'updatedb.timer,Daily locate database update,,100', - 'update-notifier-download.timer,Download data for packages that failed at package install time,,200', - 'update-notifier-motd.timer,Check to see whether there is a new version of Ubuntu available,,300', + 'tailscaled.service,Tailscale node agent,,675', + 'thermald.service,Thermal Daemon Service,,225', + 'timers.target,Timer Units,,450', + 'time-set.target,System Time Set,,225', + "time-sync.target,System Time Synchronized,,225", + 'tlp.service,TLP system startup/shutdown,,450', + "touchegg.service,Touchégg Daemon,,225", + 'ua-timer.timer,Ubuntu Advantage Timer for running repeated jobs,,0', + 'udisks2.service,Disk Manager,,0', + 'udisks2.service,Disk Manager,,225', + 'ufw.service,Uncomplicated firewall,,225', + 'unattended-upgrades.service,Unattended Upgrades Shutdown,,225', + 'unbound-anchor.timer,daily update of the root trust anchor for DNSSEC,,225', + 'updatedb.timer,Daily locate database update,,0', + 'update-notifier-download.timer,Download data for packages that failed at package install time,,225', + 'update-notifier-motd.timer,Check to see whether there is a new version of Ubuntu available,,225', 'upower.service,Daemon for power management,,900', - 'uresourced.service,User resource assignment daemon,,300', - 'usbmuxd.service,Socket daemon for the usbmux protocol used by Apple devices,,200', - 'user.slice,User and Session Slice,,400', - 'uuidd.socket,UUID daemon activation socket,,100', - 'vboxautostart-service.service,vboxautostart-service.service,,400', - 'vboxballoonctrl-service.service,vboxballoonctrl-service.service,,500', - 'vboxdrv.service,VirtualBox Linux kernel module,,400', - 'vboxweb-service.service,vboxweb-service.service,,500', - 'veritysetup.target,Local Verity Protected Volumes,,400', - 'virtinterfaced.socket,Libvirt interface local socket,,200', - 'virtlockd.socket,Virtual machine lock manager socket,,100', - 'virtlogd-admin.socket,Virtual machine log manager socket,,200', - 'virtlogd.service,Virtual machine log manager,,800', - 'virtlogd.socket,Virtual machine log manager socket,,100', - 'virtnetworkd.socket,Libvirt network local socket,,200', - 'virtnodedevd.socket,Libvirt nodedev local socket,,200', - 'virtnwfilterd.socket,Libvirt nwfilter local socket,,200', - 'virtproxyd.socket,Libvirt proxy local socket,,300', - 'virtqemud-admin.socket,Libvirt qemu admin socket,,200', - 'virtqemud-ro.socket,Libvirt qemu local read-only socket,,200', - 'virtqemud.socket,Libvirt qemu local socket,,200', - 'virtsecretd.socket,Libvirt secret local socket,,200', - 'virtstoraged.socket,Libvirt storage local socket,,200', - 'whoopsie.path,Start whoopsie on modification of the /var/crash directory,,100', - 'wpa_supplicant.service,WPA supplicant,,300', - 'zfs-import-cache.service,Import ZFS pools by cache file,,500', - 'zfs-import.target,ZFS pool import target,,100', - 'zfs-load-key-rpool.service,Load ZFS key for rpool,,700', - 'zfs-load-module.service,Install ZFS kernel module,,300', - 'zfs-mount.service,Mount ZFS filesystems,,300', - 'zfs-mount.service,Mount ZFS filesystems,,400', - 'zfs-scrub.service,ZFS pools scrubbing,,1000', + 'uresourced.service,User resource assignment daemon,,225', + 'usbmuxd.service,Socket daemon for the usbmux protocol used by Apple devices,,225', + 'user.slice,User and Session Slice,,225', + 'uuidd.socket,UUID daemon activation socket,,0', + 'vboxautostart-service.service,vboxautostart-service.service,,450', + 'vboxballoonctrl-service.service,vboxballoonctrl-service.service,,450', + 'vboxdrv.service,VirtualBox Linux kernel module,,450', + 'vboxweb-service.service,vboxweb-service.service,,450', + 'veritysetup.target,Local Verity Protected Volumes,,225', + 'virtinterfaced.socket,Libvirt interface local socket,,225', + 'virtlockd.socket,Virtual machine lock manager socket,,0', + 'virtlogd-admin.socket,Virtual machine log manager socket,,225', + 'virtlogd.service,Virtual machine log manager,,675', + 'virtlogd.socket,Virtual machine log manager socket,,0', + 'virtnetworkd.socket,Libvirt network local socket,,225', + 'virtnodedevd.socket,Libvirt nodedev local socket,,225', + 'virtnwfilterd.socket,Libvirt nwfilter local socket,,225', + 'virtproxyd.socket,Libvirt proxy local socket,,225', + 'virtqemud-admin.socket,Libvirt qemu admin socket,,225', + 'virtqemud-ro.socket,Libvirt qemu local read-only socket,,225', + 'virtqemud.socket,Libvirt qemu local socket,,0', + 'virtqemud.socket,Libvirt qemu local socket,,225', + 'virtsecretd.socket,Libvirt secret local socket,,0', + 'virtsecretd.socket,Libvirt secret local socket,,225', + 'virtstoraged.socket,Libvirt storage local socket,,225', + 'whoopsie.path,Start whoopsie on modification of the /var/crash directory,,0', + 'wpa_supplicant.service,WPA supplicant,,225', + 'zfs-import-cache.service,Import ZFS pools by cache file,,450', + 'zfs-import.target,ZFS pool import target,,0', + 'zfs-load-key-rpool.service,Load ZFS key for rpool,,675', + 'zfs-load-module.service,Install ZFS kernel module,,225', + 'zfs-mount.service,Mount ZFS filesystems,,225', + 'zfs-scrub.service,ZFS pools scrubbing,,900', 'zfs-scrub.timer,zfs-scrub.timer,,0', - 'geoclue.service,Location Lookup Service,geoclue,500', - 'zfs-share.service,ZFS file system shares,,400', - 'zfs-share.service,ZFS file system shares,,500', - 'zfs-snapshot-daily.service,ZFS auto-snapshotting every day,,1000', - 'zfs-snapshot-daily.timer,zfs-snapshot-daily.timer,,0', - 'zfs-snapshot-frequent.service,ZFS auto-snapshotting every 15 mins,,1000', - 'zfs-snapshot-frequent.timer,zfs-snapshot-frequent.timer,,0', - 'zfs-snapshot-hourly.service,ZFS auto-snapshotting every hour,,1000', - 'zfs-snapshot-hourly.timer,zfs-snapshot-hourly.timer,,0', - 'zfs-snapshot-monthly.timer,zfs-snapshot-monthly.timer,,0', - 'zfs-snapshot-weekly.service,ZFS auto-snapshotting every week,,1000', - 'zfs-snapshot-weekly.timer,zfs-snapshot-weekly.timer,,0', + 'zfs-share.service,ZFS file system shares,,225', + 'zfs-share.service,ZFS file system shares,,450', 'zfs.target,ZFS startup target,,0', - 'zfs-volumes.target,ZFS volumes are ready,,100', - 'zfs-volume-wait.service,Wait for ZFS Volume (zvol) links in /dev,,200', - 'zfs-zed.service,ZFS Event Daemon (zed),,200', - 'znapzend.service,ZnapZend - ZFS Backup System,root,1700', - 'zpool-trim.service,ZFS pools trim,,1200', + 'zfs-volumes.target,ZFS volumes are ready,,0', + 'zfs-volume-wait.service,Wait for ZFS Volume (zvol) links in /dev,,225', + 'zfs-zed.service,ZFS Event Daemon (zed),,225', + 'znapzend.service,ZnapZend - ZFS Backup System,root,1575', + 'zpool-trim.service,ZFS pools trim,,1125', 'zpool-trim.timer,zpool-trim.timer,,0' ) - OR exception_key LIKE 'machine-qemu%,Virtual Machine qemu%,,300' - OR exception_key LIKE 'dbus-:1.%-org.freedesktop.problems@%.service,dbus-:%.%-org.freedesktop.problems@%.service,0,200' + + OR exception_key LIKE 'machine-qemu%.scope,Virtual Machine qemu%,,225' + OR exception_key LIKE 'zfs-snapshot-%.timer,zfs-snapshot-%.timer,,0' + OR exception_key LIKE 'zfs-snapshot-%.service,zfs-snapshot-%.service,,900' + OR exception_key LIKE 'dbus-:1.%-org.freedesktop.problems@%.service,dbus-:%.%-org.freedesktop.problems@%.service,0,225' OR exception_key LIKE 'run-media-%.mount,run-media-%.mount,,0' OR id LIKE 'blockdev@dev-mapper-luks%.target' OR id LIKE 'blockdev@dev-mapper-nvme%.target'