osquery-defense-kit/startup/unexpected-active-systemd-u...

401 lines
53 KiB
SQL

SELECT description, fragment_path, hash.sha256, file.mtime, file.size,
CONCAT(id, ",", description, ",uid=", user, ",", source_path, ",sz=", file.size, ",", hash.sha256) AS exception_key
FROM systemd_units
LEFT JOIN hash ON systemd_units.fragment_path = hash.path
LEFT JOIN file ON systemd_units.fragment_path = file.path
WHERE active_state != "inactive"
AND sub_state != "plugged"
AND sub_state != "mounted"
AND fragment_path != ""
AND NOT (
(
-- Only allow fragment paths in known good directories
fragment_path LIKE '/lib/systemd/system/%'
OR fragment_path LIKE '/usr/lib/systemd/system/%'
OR fragment_path LIKE "/etc/systemd/system/%"
OR fragment_path LIKE "/run/systemd/generator/%"
OR fragment_path LIKE "/run/systemd/generator.late/%.service"
OR fragment_path LIKE "/run/systemd/transient/%"
)
AND (
exception_key IN (
"abrtd.service,ABRT Automated Bug Reporting Tool,uid=,,sz=469,85f5425b015db6b09e8931e290c62428d21159ad6e2d47e3a7cdb3b9dc1e058e",
"abrt-journal-core.service,Creates ABRT problems from coredumpctl messages,uid=,,sz=226,184d8a87f2d47ddece07cde34817c7534068f2afb7cd2d33815b9283d2fd878a",
"abrt-oops.service,ABRT kernel log watcher,uid=,,sz=233,998d6cfa2884de1d94da25b330b5f62dc21b8d77c88eca09299942c735c9f743",
"abrt-xorg.service,ABRT Xorg log watcher,uid=,,sz=231,873cfba658136c028eebe49d0dfaee947c9724baf4e0814486b39c1474d4e058",
"accounts-daemon.service,Accounts Service,uid=,,sz=1985,71c667ab63b92b0c0cab646310561e7b8c97d8ef23dbeff766419b9b197a9705",
"accounts-daemon.service,Accounts Service,uid=,,sz=1990,5be07366f5df8e91a0da8ca37552f36dfee0c1da8a042fd519b8e6d8d046b3cd",
"accounts-daemon.service,Accounts Service,uid=,,sz=2178,154251d7d41f91bd3b5711a4b130d2531ee87f11551ccad130ff1e22df98b323",
"accounts-daemon.service,Accounts Service,uid=,,sz=729,d68d7decceab05d4a4ad00e986ad2e89d3da51ba1d77840da787039d6482f08c",
"acpid.path,ACPI Events Check,uid=,,sz=115,88edfb65fc094281b84a69e8c1b2278c6bcdcb5ba4d4a7fa4645c90eaab776fa",
"acpid.service,ACPI event daemon,uid=,,sz=261,bcf070ae9872a05ff6b0c0dc52779bd928132a6739d3c672ab9668ebff11258c",
"acpid.socket,ACPID Listen Socket,uid=,,sz=115,ac08f8c59cfcbf70d60a2fe51b50e8551e0212e42e5f392022f2aeae393ae706",
"akmods-keygen.target,akmods-keygen.target,uid=,,sz=58,116af3f5fadce3466ec5611cc0ad08dafba7254e1427dd14971909923bc8c02c",
"akmods.service,Builds and install new kmods from akmod packages,uid=,,sz=314,6e33cd955550911f0beb784db62207f4693031b546d9b635c10d677c89f5fb59",
"alsa-restore.service,Save/Restore Sound Card State,uid=,,sz=410,ba979d13c0add25d650869a16a77e2166be54c6fd15176255450ea69047397ba",
"alsa-restore.service,Save/Restore Sound Card State,uid=,,sz=613,ad47562bf39044547594b9cb306804820c0a53ae4dda2d2279bd5de4627fe946",
"alsa-state.service,Manage Sound Card State (restore and store),uid=,,sz=465,f8452094c7ec5b6dc9ed3f00195efd29562af7617b3d2bc02647da70089812d3",
"alsa-store.service,Store Sound Card State,uid=,,sz=1208,47c0875cb666da1a4157bbf18e513c217cbd1d827efd389655a45017b28db935",
"anacron.service,Run anacron jobs,uid=,,sz=776,87d260ea7cc447dd052c131106749df24f0bdfb746a1ea3b893e107517b629e6",
"anacron.timer,Trigger anacron every hour,uid=,,sz=154,13cce6a72c725a65ab440b38241bd8f6683b2a4a38f559ba9cad6ecde56f84a6",
"apcupsd.service,APC UPS Power Control Daemon for Linux,uid=,,sz=304,f850d7b28c52186b351ae89d1ec8f68ccd972155e618a0b23a2e3a1f620c6c37",
"apparmor.service,Load AppArmor profiles,uid=,,sz=1162,02c4d752e9f13dde845cab6c067a790c7af61b3c414b82781d29881a37ec5e19",
"apport.service,LSB: automatic crash report generation,uid=,/etc/init.d/apport,sz=518,8b8d235c366ae9b433af073c5a813e3465e0d6c66e3f398ba73095c9f6d33363",
"apt-daily.timer,Daily apt download activities,uid=,,sz=156,0075e974af4e3a94757e219ba50ccb8348d4d1a8834d938f6cc9b1f4fd1db4e5",
"apt-daily-upgrade.timer,Daily apt upgrade and clean activities,uid=,,sz=184,b804d7bab8eb41202384f9270e25d5383346ace8b3d7c4f5029c150638d77bcd",
"archlinux-keyring-wkd-sync.timer,Refresh existing PGP keys of archlinux-keyring regularly,uid=,,sz=176,407a73b906ae0c5f067fa2dc8eb53bdea481e5d47bc09c7dd46acac60792288f",
"auditd.service,Security Auditing Service,uid=,,sz=1700,de2fd0b124efcd46a077eedefe8e137e6c36b7773aab4194147c7b6fca947299",
"audit.service,Kernel Auditing,uid=,,sz=1281,86c98bd2414533f8b12718d04a6aff56dd007443e3928052d815c2341639141b",
"avahi-daemon.service,Avahi mDNS/DNS-SD Stack,uid=,,sz=1042,24157f554fc3dd760f4b3715345c1385d09ad4b12687cae6cc715c2b2d5222b7",
"avahi-daemon.service,Avahi mDNS/DNS-SD Stack,uid=,,sz=1044,2e8784f74603b0e7b03147eada1f1f8ec190fdef0c3fa1041201ac71ac2c0a7d",
"avahi-daemon.socket,Avahi mDNS/DNS-SD Stack Activation Socket,uid=,,sz=870,53aa111dadc10bba319e0346e399c607a80ae6ffcded55f3cd3102c6d71995b0",
"basic.target,Basic System,uid=,,sz=927,7d97dda25769ba30dff93d7aa2818151d968c843281767b720b3eabf09563f0b",
"blk-availability.service,Availability of block devices,uid=,,sz=380,f6c677f7cc33301220bba6b7000d7258d253debde62222fae3521b2d0b5223e9",
"blockdev@dev-mapper-cryptoswap.target,Block Device Preparation for /dev/mapper/cryptoswap,uid=,,sz=449,ee28cd878acd2212ead10a22f8d5e16a28d330a424d0d66ea0b5d13b9c955ebe",
"bluetooth.service,Bluetooth service,uid=,,sz=702,440afd7133efeb647ac62c7b5169070855f59dc412c03c92ea6a747484efb134",
"bluetooth.service,Bluetooth service,uid=,,sz=756,8e91cb0d84421bba2d178c7965231a90a5f02542c617f3cf45e3d11a89c71a1f",
"bluetooth.service,Bluetooth service,uid=,,sz=760,5f367266e40e2103d64f7e448d99a856158515fc8cdb5ddcf63b5b8bf2330ec7",
"bluetooth.target,Bluetooth Support,uid=,,sz=435,f78ff493febf43aac45f4c47a6a7c0686eeb390d29148ffe3f0ccb1dce713e71",
"bolt.service,Thunderbolt system service,uid=,,sz=638,05847f565871120a4dd1c2f90bfc6794845407ee335b5ad477a30c4bdc4b7ce1",
"bolt.service,Thunderbolt system service,uid=,,sz=642,e637398eb500d6754fbdafda3aaca5176e19f7c856e38e90f6bebf7a21873659",
"chronyd.service,NTP client/server,uid=,,sz=1556,3804953be80953ce783066cc0b66043da14f901daeac3b19a56ec40fc6534d59",
"chronyd.service,NTP client/server,uid=,,sz=1558,e53c1c3a02cc848a311887dc7af1a2d257d67bea8f34249b4556c23902b90b8a",
"colord.service,Manage, Install and Generate Color Profiles,uid=colord,,sz=291,4fb1940f213ad1672e7fa77c0f603e98561c105d8efeb3c0822fb52ae58fc18b",
"colord.service,Manage, Install and Generate Color Profiles,uid=colord,,sz=295,06e271b1e8bfe1aa89800f1188470ce7a5725e73faf4be877f48785e30766fa9",
"console-setup.service,Set console font and keymap,uid=,,sz=312,50a0af31bcdcd939ad7e3f2ddfcee04e82313c5d6a8d2ed47f23dfdc1f9f2bfd",
"containerd.service,containerd container runtime,uid=,,sz=1264,cd953d771009d8a483a50ce7ccaf2a85375100d616e4491cd2b51e6511ae9a33",
"cronie.service,Periodic Command Scheduler,uid=,,sz=194,ac3ff3c8a5ce1b6367b06877b4b12ff74e7f18a3c510fb9f80d6ea6b6321e3b1",
"cron.service,Regular background program processing daemon,uid=,,sz=319,cb16493193f2340eb19705251c90de3b6574b18b77c90a63b0f6326353bbc416",
"cryptsetup.target,Local Encrypted Volumes,uid=,,sz=420,a6acf535dd967c951bab7d1df42004405167603ffbbd4cf7bf84cb6b8c868e00",
"cups-browsed.service,Make remote CUPS printers available locally,uid=,,sz=278,325d5f1ca64505de37d9dcee1483c681a9f6d5dc7a093df014e0ec52369978ff",
"cups.path,CUPS Scheduler,uid=,,sz=142,e6af6227af7ce780492e663b74971942c27a0a86a9562b790e9cdcb1e4ae38a4",
"cups.service,CUPS Scheduler,uid=,,sz=292,a1cb09c94b44357bc767eeca01c242a6ba88064e6f1af45565975a8fd14f0380",
"cups.socket,CUPS Scheduler,uid=,,sz=132,1cfd2f7cfbc3b8f8e3e4358dcde577c8ea656380c6eac2e2bd4f7dea0a5d1708",
"cups.socket,CUPS Scheduler,uid=,,sz=148,32f369f7fb74b6f4941db3d6ef00338f3275896541db9846e6f1cf4bbf26aa6b",
"dbus-broker.service,D-Bus System Message Bus,uid=,,sz=547,19c0fca6c47302df7b97ee3659e169c470de173ec0702547069b95cfdf390a0c",
"dbus.service,D-Bus System Message Bus,uid=,,sz=410,895b8a5d26e5769eb7b5a822eff4d7138a9763c4c24b4f5cbaa06e38edbf30f3",
"dbus.service,D-Bus System Message Bus,uid=,,sz=498,adde08ddc005ff1ef105d2d274ac7061a07294b6a441e8b78b3eadac2071f5c3",
"dbus.service,D-Bus System Message Bus,uid=,,sz=512,aa3b84aab09006db607edb6fe2758b4b49567743dc24a01eeaf94d48913ba110",
"dbus.socket,D-Bus System Message Bus Socket,uid=,,sz=102,e05359bbdc083b8db2b49542b26429166b5e13367a63668a4e8ff8a1b496f7ae",
"dbus.socket,D-Bus System Message Bus Socket,uid=,,sz=137,8af3f69afcf3fcdc57d5a80ddaf0da1e37c99d7779cb441e4c7b56979f28290c",
"dbus.socket,D-Bus System Message Bus Socket,uid=,,sz=193,12b7aaec8d1e007047ec12fc85b1cc6db78565dfb896850cd9148dee0455fe7e",
"dhcpcd.service,DHCP Client,uid=,,sz=1792,7dba9a554b678657d9ccda2832d5905fa92ad88e2816a43794a726f153b48a7b",
"display-manager.service,X11 Server,uid=,,sz=1756,f2135e94705748e59f878f96ed80e63a185796c4e76da3f0c2b54b0b77dbb754",
"dkms.service,Builds and install new kernel modules through DKMS,uid=,,sz=284,2a6cc32433238b88e6055f254b80e3620d29d88fcefefa5935452c3eede6a213",
"dm-event.socket,Device-mapper event daemon FIFOs,uid=,,sz=214,d49f1bb48e65242b9b7f56d79707ed5e81950a50befbdec6ee6d40fb4008e112",
"dm-event.socket,Device-mapper event daemon FIFOs,uid=,,sz=248,4c555dfe91f8b8807ab5d16d0398c1494be6e2a737385c02bd0913485afb8769",
"dnf-makecache.service,dnf makecache,uid=,,sz=457,64fd20c5163f9a310c2e0211e53d4f731285535a4798c6c074f16c1e6680304d",
"dnf-makecache.timer,dnf makecache --timer,uid=,,sz=320,134614a40987a0b815f14aa40c83fba85d6b8f3f38242b6a91bfc133229afc0b",
"docker.service,Docker Application Container Engine,uid=,,sz=1185,e47c8d28239f07ab481c1688786efe526533f1365bc00657c3e7e083fa6b56d4",
"docker.service,Docker Application Container Engine,uid=,,sz=1238,9e1089d75ea79453f2dd78624df80331bf984030b96e6fac1fc0eeaf4262849e",
"docker.service,Docker Application Container Engine,uid=,,sz=1314,667c46d7f29ed90b7a1ab6352911366417df13961b73f511a030ce314c3e3f16",
"docker.service,Docker Application Container Engine,uid=,,sz=1709,ad1c79840bf7ebeccc3f3f45fde66e62ea46d29ee5f821d1dd48a889abdacb42",
"docker.socket,Docker Socket for the API,uid=,,sz=175,caf98bf39fb8621fb955476567a38b8a6b35bab2dccd8a29a16da23d4bb99450",
"docker.socket,Docker Socket for the API,uid=,,sz=295,96cd0d89474816ddfb03893b44c36e7d744254aed1bf6d30eca65ff396114656",
"dpkg-db-backup.timer,Daily dpkg database backup timer,uid=,,sz=138,53f7ed8aadfaf61d9decda9565b65f68d5b5a66be4ee8f87741e47163839b4a6",
"dracut-shutdown.service,Restore /run/initramfs on shutdown,uid=,,sz=503,b8ba6c13fb9b792280fe8ad0e51009cb93985e5693090021fb37b550f891ef67",
"e2scrub_all.timer,Periodic ext4 Online Metadata Check for All Filesystems,uid=,,sz=251,23f20fb6edc9fd54bf4754ef4311f88cba45ba65c6aecfa1885e8fb99531c211",
"firewalld.service,firewalld - dynamic firewall daemon,uid=,,sz=670,99c175aa55489548d4a867bb5119082a502abe8dabe5fdf0f9c00a6d2ed2ecb1",
"firewalld.service,firewalld - dynamic firewall daemon,uid=,,sz=674,60f9f917ff88bd768a0772f0872f039dc8e7790e15442280249a07c30b1bb8bf",
"firewall.service,Firewall,uid=,,sz=1537,fada35bd9561ca881bd783193ca24b90777f057ce146d4ff77e5dd4edd9b1d1f",
"flatpak-system-helper.service,flatpak system helper,uid=,,sz=259,0bb869432de99daa07a86d87513cd0384240c5e5f8f4d855705bb2a2d2b3ac28",
"fprintd.service,Fingerprint Authentication Daemon,uid=,,sz=896,a30798db998d8f2f9d9b583bb266e23bce083154214b7b78b19fdd33ee6b7e25",
"fprintd.service,Fingerprint Authentication Daemon,uid=,,sz=900,75f7d0575d982d37e3e10510688180a5ac6abf64a95aa0e70f25404516214ec7",
"fstrim.timer,Discard unused blocks once a week,uid=,,sz=270,b15bcc0d8fc3698701087264a834bc6c495780ed27b68e0a8e3eb10d02bef74a",
"fwupd-refresh.service,Refresh fwupd metadata and update motd,uid=fwupd-refresh,,sz=404,971a86aa36c9b11c45fc5fb7b2ed17037240d1c2956517e01452262ebb64d080",
"fwupd-refresh.timer,Refresh fwupd metadata regularly,uid=,,sz=194,84597cdd8c589cf5632e7d9a5f04fc122b8678cc1d7e58d8b5cb9b531987f6f9",
"fwupd.service,Firmware update daemon,uid=,,sz=646,1939aef65c7310a44ce0adb18b28c15956fd37c24db1683a57dcb8b0d7ae14ce",
"fwupd.service,Firmware update daemon,uid=,,sz=650,15b7bc0da153b20345043c615a955065a40e271bd7ed96807095b5433765c437",
"gdm.service,GNOME Display Manager,uid=,,sz=855,277ab2f09ac40921a82fd1738a841624a063162f3802fa1ee2ad3d6c7e3828cf",
"gdm.service,GNOME Display Manager,uid=,,sz=919,118a20990ac2a81dbfd41960540c7f687a83357be241423a55cc85893675a11f",
"gdm.service,GNOME Display Manager,uid=,,sz=982,fd99a9bfde5a9034c4048abbe653375f120399a64baa246864117462c1cf8bdb",
"geoclue.service,Location Lookup Service,uid=geoclue,,sz=464,d9e1a7eced6193866f048ce9de97809d5f2896e1e3f15d559710bb87d50a054a",
"geoclue.service,Location Lookup Service,uid=geoclue,,sz=468,7875489641c9bf6cff18e89795770c72c645a856ba662e53cdc324d59d700cbb",
"getty-pre.target,Preparation for Logins,uid=,,sz=517,58bf84c84520850ed138e794f8618b9843d28eb00f58e7094b2ab17b047d69d7",
"getty.target,Login Prompts,uid=,,sz=508,5a6c2e59b3cebc31f3c13e8814b454709de3b4b074c7055afb5de2b8d417764f",
"graphical.target,Graphical Interface,uid=,,sz=606,07df05786d62d57c98c66d3cf808e245ed274c19a7bfdd9c0c8f310d1a0c324d",
"gssproxy.service,GSSAPI Proxy Daemon,uid=,,sz=462,34e221d5b33272f088047956188e8b0ab26abf2ce77b592f08d305caabb3e78d",
"import-state.service,Import network configuration from initramfs,uid=,,sz=441,9e5fa005b042edd5e93eb05d3d9d2dddd9665b620b5466def7b62f5d48b9998c",
"integritysetup.target,Local Integrity Protected Volumes,uid=,,sz=430,d6e7de3af0647a7a6a6db380a12cf982dca2f29447544c8cbf297d1fbb26f703",
"irqbalance.service,irqbalance daemon,uid=,,sz=505,bd0dd993b3b1bbc451aaad06540db206b9fbbbf7e507f1b37e9227608397189d",
"iscsid.socket,Open-iSCSI iscsid Socket,uid=,,sz=175,e3eeff482cdd196045015e49ba823781a61f41fb96a9a6be5b25d23f519ff75a",
"iscsiuio.socket,Open-iSCSI iscsiuio Socket,uid=,,sz=165,3b2c2e17187e4c3b2ed7c7eb7bf23536b57dc00dbcf374566ad5a2443835a631",
"iwd.service,Wireless service,uid=,,sz=574,4460fa625d55a2b4b7986b66ee8dfb7e485d575e9f718eea17d9028e6522d5dd",
"kerneloops.service,Tool to automatically collect and submit kernel crash signatures,uid=kernoops,,sz=376,4073e1ab0f4ad68abac1153ea219acce5c0c995cde66f466086adc06085eae0c",
"keyboard-setup.service,Set the console keyboard layout,uid=,,sz=287,7bfae47456a8ccfd36c05494a6ec80256b4b2454fd737892c09e6c3c83b87e73",
"kmod-static-nodes.service,Create List of Static Device Nodes,uid=,,sz=701,fc75378e4878af8d609471832aae6b052485bb741a140569c0060424ec867099",
"kmod-static-nodes.service,Create List of Static Device Nodes,uid=,,sz=705,7852eaa03536189739c4c66f4961c4685b4f05bae461896677c98a2c4a242f57",
"kmod-static-nodes.service,Create List of Static Device Nodes,uid=,,sz=785,aef358e06c7ca76ddd89e55155ea9ca854c442a6761508598d9b5a4dbabd2c10",
"kolide-launcher.service,Kolide launcher,uid=,,sz=1975,9fd65528988ff4abd30a6899f9823b04d8006f30fbc4ef2510a915a5b4770bb1",
"launcher.kolide-k2.service,The Kolide Launcher,uid=,,sz=242,169fe7c256fb468b1e0dd6c040948b603a48399b771338a7cdaec60671a446fe",
"ldconfig.service,Rebuild Dynamic Linker Cache,uid=,,sz=695,c2cdf1c2b32939fdb116739eac27a7ad74e9308256b9801e1ec052a956f79853",
"libvirtd-admin.socket,Libvirt admin socket,uid=,,sz=242,23a5106f5e19142bcdf0e4b36294c8dcd0f92e5c11ce727b99d16d97c96dc172",
"libvirtd-ro.socket,Libvirt local read-only socket,uid=,,sz=249,98a839c24e49187075e0a8f690c37a4fee08464d47f291d063663c585320f959",
"libvirtd.service,Virtualization daemon,uid=,,sz=1973,aed7c2dcb80d54ce48606dcebbafd8c204f12cc7fc40a988918b77ca4b7e40a4",
"libvirtd.socket,Libvirt local socket,uid=,,sz=207,5e0bb6a9e413cadce42b66e108c4afbc20ad046b3d786211d196e8cf744500cf",
"lightdm.service,Light Display Manager,uid=,,sz=340,0db37a14521be729411a767f157fbd07adb738b14006277def53a1efe4dacfb8",
"livesys-late.service,SYSV: Late init script for live image.,uid=,/etc/rc.d/init.d/livesys-late,sz=503,2bcdf96ee5f52cd009050e85a5a01329948d2ce8e22bd9fa2c4febb70d3d7e53",
"livesys.service,LSB: Init script for live image.,uid=,/etc/rc.d/init.d/livesys,sz=564,73ba2baea0e7ad5474021873824b24af51b8980aec7866514e53c6eb563d2a81",
"lm_sensors.service,Initialize hardware monitoring sensors,uid=,,sz=328,be946f218205e4a571510fe3b3757ed3ba7df9390fe7c28fd6d30d94604021b5",
"local-fs-pre.target,Preparation for Local File Systems,uid=,,sz=453,4190c957c05d5b97b3f2f662504b65cbdc7398668850eb82a715af073a57d6e3",
"local-fs.target,Local File Systems,uid=,,sz=555,8e68c22028464594411371ee35f8a17a0f65cbd86a718e789debbddb5b487075",
"logrotate-checkconf.service,Logrotate configuration check,uid=,,sz=1103,b1282b3635284c74f169e69657702db7977064d7e921aefbfe40df2f934567a5",
"logrotate.timer,Daily rotation of log files,uid=,,sz=191,42f723dc5d90247a5fda11a3358d1a67eccceed856192b2264aa222d6aa240f4",
"logrotate.timer,logrotate.timer,uid=,,sz=35,8fb3eea4c97504abd8d07ffdffce20a401ea20f1bde8f950af983d325e60d624",
"low-memory-monitor.service,Low Memory Monitor,uid=,,sz=688,5f9c54f5c59887c3c880619adfc001e3cc2611bd620618a792f5af9317775fc5",
"lvm2-lvmpolld.socket,LVM2 poll daemon socket,uid=,,sz=205,cd708269dbea00ec075b7f2be6c4fcfa03086f1728e199972d1f9dd63ecad23f",
"lvm2-lvmpolld.socket,LVM2 poll daemon socket,uid=,,sz=239,a9c45602d9bc5f14583d7dfb27c3db6d3f07ae99dbc455e59bceaf401d446bce",
"lvm2-monitor.service,Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling,uid=,,sz=515,8bf198407ad9c58cd45a3f0b0d59d82ec969067a853e548d4c2efcc64022a49d",
"lvm2-monitor.service,Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling,uid=,,sz=575,7ea058e379c555c437b91101e1d27bc64e1d21400eaa4192c190c251779c696e",
"lvm2-monitor.service,Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling,uid=,,sz=602,e0d575fb203194b3946c9d8394a7fa0f2abea3eedbc5ae631401c63ed9bdf572",
"machine-qemu\\x2d2\\x2dwin10.scope,Virtual Machine qemu-2-win10,uid=,,sz=363,133ff0f992839d16792671a11e2e5e5ab375cfc034f332579055b36a7c1aaa1a",
"machine.slice,Virtual Machine and Container Slice,uid=,,sz=453,0fe5e4c04a07de5e4421f00e35057f00cc17a0d39da004693f565f31c5c156b4",
"machines.target,Containers,uid=,,sz=470,20b9ac01719747bce8b46406f542c7034721fcee6cba29482a11d2068b58b54a",
"man-db.timer,Daily man-db regeneration,uid=,,sz=171,3a3a1ca2ab2c92fe74bae1257e4c666e5dd0a31f441221dfa809bc0cf6540774",
"ModemManager.service,Modem Manager,uid=root,,sz=480,ff459b86280781eee93ed69f487ab45bed2356dbd5096458ff0d6ad866873a49",
"ModemManager.service,Modem Manager,uid=root,,sz=515,7440e1296cf610dd3847641c2bc93cadf210b4021964d07b7a59b6cf3d5aee06",
"modprobe@efi_pstore.service,Load Kernel Module efi_pstore,uid=,,sz=549,2bdd434d31f4a3b940b05a585d5a2a3226833a93eab31764ab85d92fc4fbd29e",
"modprobe@pstore_blk.service,Load Kernel Module pstore_blk,uid=,,sz=549,2bdd434d31f4a3b940b05a585d5a2a3226833a93eab31764ab85d92fc4fbd29e",
"modprobe@pstore_zone.service,Load Kernel Module pstore_zone,uid=,,sz=549,2bdd434d31f4a3b940b05a585d5a2a3226833a93eab31764ab85d92fc4fbd29e",
"modprobe@ramoops.service,Load Kernel Module ramoops,uid=,,sz=549,2bdd434d31f4a3b940b05a585d5a2a3226833a93eab31764ab85d92fc4fbd29e",
"motd-news.timer,Message of the Day,uid=,,sz=161,f18dbd0f64344440d7d6e8f1ff302d26fe383921be2a3f13948a8e2e2545ee58",
"mount-pstore.service,mount-pstore.service,uid=,,sz=1158,d24afb3d403a2196f7da07a655158d13ccd3d2f03baeb09667cd9146f08d2f8a",
"multi-user.target,Multi-User System,uid=,,sz=540,e73d44a251ac878da0ca66ec437e3890345fec9684ff1374c57e012b95266b7f",
"networkd-dispatcher.service,Dispatcher daemon for systemd-networkd,uid=,,sz=258,bf1d13d1ea39069d0d0b87fd4254283b2c3443737d1eeec4f6a908ad2883bd5a",
"network-interfaces.target,All Network Interfaces (deprecated),uid=,,sz=132,e71200dad50e28e5e2fe4e0fd0980a0353401ef5085bf7413748ced7773654d0",
"network-local-commands.service,Extra networking commands.,uid=,,sz=1338,32d01f7dcf0937514754040d6caad04bc82976934bc7a214767cbe97dc165658",
"NetworkManager-dispatcher.service,Network Manager Script Dispatcher Service,uid=,,sz=637,77f8c9e7b0c5d1cd097454d201cdceaefbcb9fdc2557fb9c1ddef0b4ff02f04e",
"NetworkManager-dispatcher.service,Network Manager Script Dispatcher Service,uid=,,sz=652,88abd15e8cfe1f09f7cc4eb23561b86a14b6b56a13ed847f77c7e03cb27b8a39",
"NetworkManager.service,Network Manager,uid=,,sz=1335,5a9ddd4d9e74f83002654342df18c5e0b4da2d3ea14f40354a3cb4963560de2b",
"NetworkManager.service,Network Manager,uid=,,sz=1336,0d96ab7fdbde8be2dec1cf85ec83ac9ca544752eefa0bd9136817bd24b8c4c22",
"NetworkManager.service,Network Manager,uid=,,sz=1351,80774cebda3cd3d513be7629f3fa13e4eaadf17a1c61868b6ec60097e5600c5b",
"NetworkManager-wait-online.service,Network Manager Wait Online,uid=,,sz=1148,766569bd7420fab7af4e601c545311e34f71eb068dde6f94efcab32d8868e183",
"network-online.target,Network is Online,uid=,,sz=513,ab7df736648ba1b6c96841ca1007d657d1a74567b289dc33aae538601cb1454f",
"network-pre.target,Preparation for Network,uid=,,sz=520,01edbbdc0302bddd2ded161737f8cede5c9ec3110f451897658514498e59ea4c",
"network-setup.service,Networking Setup,uid=,,sz=1392,6a9633d2dbb4fd0cb8efc3dd1aec5a02a2f00c824bc7dcaff6cc6eb93ad22ada",
"network.target,Network,uid=,,sz=529,0892f909898180ef5e73eef882b24e74da67bd59bf9083cda1bb2251b6973114",
"nfs-client.target,NFS client services,uid=,,sz=433,72fb2c60b15cc958be12528851acfc69314dbe3246dc4044f2d874ab502ac3d3",
"nginx.service,Nginx Web Server,uid=nginx,,sz=2467,a25811687cc1b0370a1c4b75321ac497e6b8b099a0bef96e7a12f83c2aa62655",
"nix-daemon.service,Nix Daemon,uid=,,sz=410,42674a1b26e27fb05212ed2a7a6bc18f81e482f2a58dd1eb71bba84522c04922",
"nix-daemon.socket,Nix Daemon Socket,uid=,,sz=235,3802372e8ccfd129929aa0887fb3f98d7ec2977e5c7a3dc774d29875c6651b16",
"nix-gc.timer,nix-gc.timer,uid=,,sz=72,e4a2d9ed55e286cd1594b13a033480a3fa1c23cfb48c91321de022e15cbc4282",
"nscd.service,Name Service Cache Daemon,uid=nscd,,sz=1778,8f290d707c0fcb6f1b22195798c4849fa9cad71d76fbe78051fcff24246afd12",
"nss-lookup.target,Host and Network Name Lookups,uid=,,sz=562,2a2268ca516d4a014e4c14373f31db046ad64e8d802fe49218f284f638959345",
"nss-user-lookup.target,User and Group Name Lookups,uid=,,sz=521,1b81937b5bd8b93651515ecd7431ea9c8d46ac083545d89ec34361e3b0a5bf8e",
"nvidia-persistenced.service,NVIDIA Persistence Daemon,uid=,,sz=316,5314d8d3a4575ca714bd3e4a897d7824cccba384858013ac2d5ddc038ae5219c",
"openvpn.service,OpenVPN service,uid=,,sz=299,cf72e05c2788bfd82c7f5e910ca948fc87dba3ced6b94924c2e8f1b284ea752b",
"packagekit.service,PackageKit Daemon,uid=root,,sz=392,d7d40984f72ea0a382c89c79a155c8e55df4ec2a730feb8f8b746706c1307c65",
"paths.target,Path Units,uid=,,sz=407,8e9ecbb6edeefaeba7134cbf3cc4a17e8e904be7ce6d06840588d7dc3d53ec2b",
"pcscd.service,PC/SC Smart Card Daemon,uid=,,sz=268,8b18858eefa5decb2c9cf0956e6ed0319ec58de8145054d9b81ac5cdf0406692",
"pcscd.socket,PC/SC Smart Card Daemon Activation Socket,uid=,,sz=157,3c26ba218d97a5c9b423dea695a8bb4d67bae2ee260c04df3f3d47951f37c36c",
"phpsessionclean.timer,Clean PHP session files every 30 mins,uid=,,sz=144,9fb4a1ad365956a5e6aed6b3c88c5c0cbb3ca8e8fa07b748b5ce73675afa054d",
"plocate-updatedb.timer,Update the plocate database daily,uid=,,sz=170,e7a93ef5c06b3c57fb52b3d651f4627c917828992a500f8b0522bd61c9bcb1ae",
"plymouth-quit-wait.service,Hold until boot process finishes up,uid=,,sz=224,d8e61c8e77040ba5da5650fa64c5b68a74383f15eda2ddb9310c3e898d108e5d",
"plymouth-read-write.service,Tell Plymouth To Write Out Runtime Data,uid=,,sz=268,da37f940b98d08ba26b48a43dcaba270782c7b757a7c8acc55f19c76f363c403",
"plymouth-start.service,Show Plymouth Boot Screen,uid=,,sz=585,bb2da944857b8efc08177e44f2c162c538c3dddb1c9a43ac20e2882f04861dd4",
"plymouth-start.service,Show Plymouth Boot Screen,uid=,,sz=617,09169907f5150a161d551e9853e3c2a8df5ee15d86ea18b7ba1c485374a2798f",
"polkit.service,Authorization Manager,uid=,,sz=167,7eda883d76ff53a66e1313898541e973b4f1eaeb8d0e033f4301f3ccd9eb0492",
"polkit.service,Authorization Manager,uid=,,sz=172,6dac9df426bbaec2bd79b1e71ad2a30d01e40c0c6e1c0d94150f762c7890b8ff",
"polkit.service,Authorization Manager,uid=,,sz=222,8c440cd2e9697ce04b538165a58333bd2a60b13a13b58ad431ba316d1640b2cd",
"power-profiles-daemon.service,Power Profiles daemon,uid=,,sz=697,6c2e299c2c0b7e4b2fd8d88ecd1ac5d922df60605ac7c1af74b10d678b1d0bef",
"power-profiles-daemon.service,Power Profiles daemon,uid=,,sz=705,35bfdd99995aec70c4235d16ccd86c73cac2289fe47326180c75a0bd17032591",
"power-profiles-daemon.service,Power Profiles daemon,uid=,,sz=709,df8cfd5a0d0c6d0a665ada080e062868a7456e82b0d83b79d0d0b583c6797aa6",
"proc-sys-fs-binfmt_misc.automount,Arbitrary Executable File Formats File System Automount Point,uid=,,sz=779,399cf943eb5f136a2e927e96635aece8713802b08948abdf93101008506d9da9",
"qemu-kvm.service,QEMU KVM preparation - module, ksm, hugepages,uid=,,sz=367,da0544deed8c3e9f9f8221c99f5e1ca67135f15f1f3f070767cb8966f705304a",
"raid-check.timer,Weekly RAID setup health check,uid=,,sz=155,5bd8c868b38541b46e12b3af5a621cc94630346c69987696434cbc944bf161b1",
"reflector.timer,Refresh Pacman mirrorlist weekly with Reflector.,uid=,,sz=184,538dd31a670160b3b3100d1d61ec84d1c99be9159067cbd0bea1a280dd392be3",
"reload-systemd-vconsole-setup.service,Reset console on configuration changes,uid=,,sz=1263,4bac59dce5b07c5c98a524400d99fc1dcab09c4e4b6178f48d3206727ea7eb07",
"remote-fs-pre.target,Preparation for Remote File Systems,uid=,,sz=454,401196a6bf1e5786b88d6539728b01ccf56ae49ac2ac6060915a9d82f180e0ce",
"remote-fs.target,Remote File Systems,uid=,,sz=530,ea2eeaa585de8819d99d82ebb0230651f2b8e63f07a6f169a25b0cbbfe1fc37a",
"resolvconf.service,resolvconf update,uid=,,sz=1162,ea8af7318dc5e91d5303bf4a3a6528fb51119a11d4af89651023f3a8d78e9bb5",
"rpc_pipefs.target,rpc_pipefs.target,uid=,,sz=80,7787ae2243a046e66941504ecb1a9ae305b9a23af96d1a8b0e1dd243ce4059ee",
"rpc-statd-notify.service,Notify NFS peers of a restart,uid=,,sz=387,8bafcedf65bdbcb2e38843a232df01520513350978a5f0e34297638f5e4c51f6",
"rsyslog.service,System Logging Service,uid=,,sz=469,726b9641b81ede267adc4180b3e25b85122a4e798e0f748cac0e9e3a414e1622",
"rtkit-daemon.service,RealtimeKit Scheduling Policy Service,uid=,,sz=1020,e1a03bd4f5e67fc14e98bd52f1c6755c8fa87c8940692037b030f8ba8cbf0519",
"rtkit-daemon.service,RealtimeKit Scheduling Policy Service,uid=,,sz=1024,49c9001658906e4a7b3c913358cbbfe7c1d62d4c211b5790d06200c13cc86c07",
"rtkit-daemon.service,RealtimeKit Scheduling Policy Service,uid=,,sz=1053,fefe83a6caab23365cff853d5672491f4915e9ecf557b0e523ba873970bf042d",
"rtkit-daemon.service,RealtimeKit Scheduling Policy Service,uid=,,sz=1074,5c4389588c311482c7f98b568f39f41f20b19ef82ddf06a7e9489eea7b4e9772",
"setvtrgb.service,Set console scheme,uid=,,sz=330,32e83e016d68d15c28f1d55f4c25ab742abe11851fbad32ae615d74c82fa63cc",
"shadow.service,Verify integrity of password and group files,uid=,,sz=319,c596409a82ad0db6e1761d98aca50cf7aba49e0f8662edcd62d52b4d77b7b74e",
"shadow.timer,Daily verification of password and group files,uid=,,sz=124,736eb7b16fc2fff9c902d4823641114338f290a6825e66831f41c5474e994207",
"slices.target,Slice Units,uid=,,sz=462,0b263a5374d07e7871a1f30f41b73ed9d07e8442819c7a609419ea38139513ed",
"smartcard.target,Smart Card,uid=,,sz=428,a6a453b13a305db13ab9e87391199a7626700e7e1e3d8b1e5fb85137d2c25fb9",
"snapd.apparmor.service,Load AppArmor profiles managed internally by snapd,uid=,,sz=880,80e579eb1762a8a5fbc710d0b8500ebdaa149337616e02412c5fafe30eb51375",
"snapd.seeded.service,Wait until snapd is fully seeded,uid=,,sz=322,2552f9bf2522391b35cfad45c0d80cf4aff22205657c44f32a89ea01cf98a426",
"snapd.service,Snap Daemon,uid=,,sz=494,b270443df8f174db915b5f9c59ed166fb3ff12dbb37be97ae8fce517938e2ebf",
"snapd.service,Snap Daemon,uid=,,sz=502,d4da88a947eed89c461102091211c627ba891fbe0dfd6f6253d6b4f8a8c86e54",
"snapd.socket,Socket activation for snappy daemon,uid=,,sz=281,7703ac622bd6d863bfbf1385d4c0bd9c80b97c0a12af92174879b0aa1cfd1ec2",
"sockets.target,Socket Units,uid=,,sz=409,de07df26397e3890db1d52274aa5abeae3ac849aa923fe0d7b4f8652eadb6877",
"sound.target,Sound Card,uid=,,sz=428,52c92b8cc874b85fc6fca72947ef210f9d02d46368ecfc1f98700f59ad529468",
"sshd.service,OpenSSH Daemon,uid=,,sz=250,e40f8b7c8e5e2ecf3084b3511a6c36d5b5c9f9e61f2bb13e3726c71dc7d4fbc7",
"sshd.service,SSH Daemon,uid=,,sz=1609,5b4e6d255fe49f9500b857029ace4d17114c4076e101e1f4f70241071026ceaf",
"sssd-kcm.service,SSSD Kerberos Cache Manager,uid=,,sz=427,3285dc79414d20324f05a26011e1a300f43863d2f459668721fb15d7585c88d5",
"sssd-kcm.socket,SSSD Kerberos Cache Manager responder socket,uid=,,sz=182,b884b8794ad8a0513075eaf09028a17d370dcf6d6a89cbfe6e87f67766dabf77",
"swap.target,Swaps,uid=,,sz=402,10e164b86720b9d3397ed934471dd2f1830909731bc4a3dc69f62635e1c0cdfa",
"switcheroo-control.service,Switcheroo Control Proxy service,uid=,,sz=497,002ad2bc3b26a3de602a821640c154b336cf6029a24be22f4610bd6b370bb8a1",
"switcheroo-control.service,Switcheroo Control Proxy service,uid=,,sz=498,398cbb3e818bae9677efaed8b3030678b21c2e8f363d37c6bc3bcd940507ff70",
"sysinit.target,System Initialization,uid=,,sz=566,127cf76cb13ab39dc7150c3f7a3224b7ee15d05cf1a303cd793b1abb294d0120",
"syslog.socket,Syslog Socket,uid=,,sz=1415,78fc9f6b50902378345ffc4d5e2ffd50a5119932625d0c6f5c7324b0c4005bdf",
"sysstat-collect.timer,Run system activity accounting tool every 10 minutes,uid=,,sz=325,488ca93448ac0ed2dc4f90236f436fb26c07a4841648987d730a4c09d57616f5",
"sysstat.service,Resets System Activity Logs,uid=root,,sz=475,f8b3354becd7e66dde0e3d9cf220747b98c792a93be03eada0c6807d9491e345",
"sysstat-summary.timer,Generate summary of yesterday's process accounting,uid=,,sz=356,bf3fc94dd3ae29166cf67c09fa1a860eacaacb085ebea4c23b2dc8dd4690bae6",
"systemd-ask-password-console.path,Dispatch Password Requests to Console Directory Watch,uid=,,sz=727,f3fc9dd4c30df9b806b940061fe79a3d1bfe3781d6a09cebbf1da0401cef52bf",
"systemd-ask-password-plymouth.path,Forward Password Requests to Plymouth Directory Watch,uid=,,sz=454,2462f436adecb860eb11a4dcce6391074b0e0e4bc1b36778692877aea8d7553f",
"systemd-ask-password-plymouth.path,Forward Password Requests to Plymouth Directory Watch,uid=,,sz=525,7c49dcef4bc60b8c921dea86317dda64507132d86937bc017a65d8e80e0f99ef",
"systemd-ask-password-wall.path,Forward Password Requests to Wall Directory Watch,uid=,,sz=652,0c0d3ffa20f99ec2c1c95d6844c8c0fbb1f2fb811ab35d203d589c1fb53951e5",
"systemd-binfmt.service,Set Up Additional Binary Formats,uid=,,sz=1213,81199ad8fdf7a52f048bccff49c3933d76b2c4e5a31fa6239535f4f1c9dadea5",
"systemd-boot-update.service,Automatic Boot Loader Update,uid=,,sz=684,7762e0ef9a89e63551a4b9a8b12238548290f32884d63bd443ac25d93ad7cc4e",
"systemd-coredump.socket,Process Core Dump Socket,uid=,,sz=594,620c5d2f4f3bb133a0b41ceb208e38bf57d02c85320a6c9c6f7bbb4c7cf4171b",
"systemd-cryptsetup@cryptoswap.service,Cryptography Setup for cryptoswap,uid=,/etc/crypttab,sz=902,2bc97871762fa5179b6f17c4c495ec5c828cd9458773089df19c1a29d19f5df9",
"systemd-fsckd.socket,fsck to fsckd communication Socket,uid=,,sz=540,5cbce5a8b5f9391f0d774e259e90408459a2a66e82b99dd33ad9bdb52087bf49",
"systemd-homed-activate.service,Home Area Activation,uid=,,sz=645,4f816a2918cc824b4c878e129461db1809f730be2ab337ed052206e35a570c8e",
"systemd-homed.service,Home Area Manager,uid=,,sz=1346,a07b2c38c7f733b97bceebe1c77daab82f98cc5399a0028ff3539e7675628ee6",
"systemd-hostnamed.service,Hostname Service,uid=,,sz=1189,8bf6dd3e80f80ca8d2fa5c4fe91ea90e8815d488e8eee22484b342fa9cde8e9e",
"systemd-hostnamed.service,Hostname Service,uid=,,sz=1205,eb16153c65d8a65fe001071e6270ee76fecb4fc6c19b8a7c0590f6ce9a873a99",
"systemd-initctl.socket,initctl Compatibility Named Pipe,uid=,,sz=553,afcb762f3d2bcf4e1f94ac9712fa25016334c854ffd6815ec08cc9cbabfce118",
"systemd-journal-catalog-update.service,Rebuild Journal Catalog,uid=,,sz=741,c69d69ed349ca6863130a8a9c3bc781f55c974e589f0d8c41fa8a5a17b51aa7c",
"systemd-journald-audit.socket,Journal Audit Socket,uid=,,sz=655,d260e31cb9fe659dd5ba7ffd8981f40f5bcd4dc819d3cf66a4bee2b128b689c4",
"systemd-journald-audit.socket,Journal Audit Socket,uid=,,sz=694,2c6e0f03250c09114aa7a137b513c0c17d4361badaa1f822d87e6c57779e7f44",
"systemd-journald-dev-log.socket,Journal Socket (/dev/log),uid=,,sz=1154,fd449ae03beeebab53ad75f70cba4c4d0080fe52ad5003cae9fb55c7381290e2",
"systemd-journald.service,Journal Service,uid=,,sz=1800,43bb7e2fc8d63e1fa69dfb72c179b3c6ac9fc7241c00690e5a8a262173ff71b8",
"systemd-journald.service,Journal Service,uid=,,sz=1816,34d798175c39d2ea31849663eed13f153d3fe1ab7dfa6b98885d933268dcb9c5",
"systemd-journald.service,Journal Service,uid=,,sz=1820,42df40d2c4c44c312642542d1cdca697ada2b402baeea8611bde9ec045a2a020",
"systemd-journald.service,Journal Service,uid=,,sz=1869,9afb303d61342e3efaa2527d92fb70d0b32b9584bda92c939647f8468d31246b",
"systemd-journald.socket,Journal Socket,uid=,,sz=906,c17504f4c86653882070215fc089a610f69d8149e1860b92e439b008cce3f1d1",
"systemd-journal-flush.service,Flush Journal to Persistent Storage,uid=,,sz=819,153bf7052c1ab54f38762102dfae171b801add553364336020a5034102d91149",
"systemd-localed.service,Locale Service,uid=,,sz=1209,c15244cfb7f6a967b002653d169b4e63ad332675f16b3a1cabc9cf58fc3b21ee",
"systemd-logind.service,User Login Management,uid=,,sz=2002,32fe4938115583aae1dc7029109dea05baa217e765da49c47d46c953abdd3968",
"systemd-logind.service,User Login Management,uid=,,sz=2018,c4f403fc9d9e047065725650aa460365afc632f6f56a9814f57f412dd0112d02",
"systemd-logind.service,User Login Management,uid=,,sz=2071,d581e6b8a24585e5d4fbb21bd8464abadf9ca473c9d9b3ab0820d182ba1a3e47",
"systemd-logind.service,User Login Management,uid=,,sz=2129,b3636ad00687ec36348512b361f62e4e7237a50218340b43f52c44f08274fea6",
"systemd-machined.service,Virtual Machine and Container Registration Service,uid=,,sz=1290,01b8531b25f3f96b1fe23102c1508f9dda487395847f6a221fcfd6d6b665954b",
"systemd-machined.service,Virtual Machine and Container Registration Service,uid=,,sz=1306,f08d93aadb362d8fa8d8f80ccc79d367c13f6e2ba340c49790bc252dead3f0df",
"systemd-modules-load.service,Load Kernel Modules,uid=,,sz=1019,3339bd38a056593c624e6de4df3f9efa077eb44a800ad983256169078dc636e0",
"systemd-modules-load.service,Load Kernel Modules,uid=,,sz=1050,30e25b3e5d3648e475b56f81a7a63755db519c8c37d5f5f5a54203c9d17d8c80",
"systemd-modules-load.service,Load Kernel Modules,uid=,,sz=1072,085394e96ceb3f1429c9c10935dfbfb98560dbf0179437d3575d176f8b59849b",
"systemd-network-generator.service,Generate network units from Kernel command line,uid=,,sz=690,a5dfb759840f689aff28142544c1eaa88798435cbade22046358fe230ef9ce5e",
"systemd-oomd.service,Userspace Out-Of-Memory (OOM) Killer,uid=systemd-oom,,sz=1651,464f2acfa13842b2270c940ac7dc0c2514a04e0a334a1ec7dc39820da709dc00",
"systemd-oomd.service,Userspace Out-Of-Memory (OOM) Killer,uid=systemd-oom,,sz=1694,28bbb45e9bf18fbee01c57672e9219b7e72ec7028167c5a18f26dc3b227ce01a",
"systemd-oomd.socket,Userspace Out-Of-Memory (OOM) Killer Socket,uid=,,sz=602,b8b9345391cf485d277a20b9e2bc5ba830cfa24f3eccb93eba38412f47d76873",
"systemd-random-seed.service,Load/Save Random Seed,uid=,,sz=1167,0403174dc7a422c9e9388424a1450870ebc5585825169a6f53b90e8be2e36704",
"systemd-random-seed.service,Load/Save Random Seed,uid=,,sz=1175,54eb25e9b2062f6b31f92f53a321bb8a045ab70353f1c9c370e43ee1a823cd60",
"systemd-random-seed.service,Load/Save Random Seed,uid=,,sz=1281,2ef2ddb856537616489a2b6d4dc5ae6b1295831a89398267ad9d604fbd71c810",
"systemd-remount-fs.service,Remount Root and Kernel File Systems,uid=,,sz=775,57fcb69af7372ee0ea9f10d039575998d2c14509d77920298e04e295cf5d5fb8",
"systemd-remount-fs.service,Remount Root and Kernel File Systems,uid=,,sz=779,776ada4c24348ff4bb8ea378448358c7d099886af47a484139c0235e6028d6ad",
"systemd-remount-fs.service,Remount Root and Kernel File Systems,uid=,,sz=832,43497b2d339134dcc40a0ed51c9ff61ad84276fac658ca924b4ee223a02e61e8",
"systemd-resolved.service,Network Name Resolution,uid=systemd-resolve,,sz=1773,9fd388c457fa444a8f42ba8ebd3b63ec635f1fd8be4ea9b61d0dd7920b67cc10",
"systemd-resolved.service,Network Name Resolution,uid=systemd-resolve,,sz=1785,b14431545835ed3d90754d487cbfe7a93a845648065662234aa7541ddb8e933d",
"systemd-rfkill.socket,Load/Save RF Kill Switch Status /dev/rfkill Watch,uid=,,sz=734,1df5aad458c8da0ebde7adac9bd42a1848bf0d2d89a4862baf44c77d687723b8",
"systemd-sysctl.service,Apply Kernel Variables,uid=,,sz=701,24d657c3f8c42294038b2c8b8c1faa944b43b35dbaaa47a0cf1dd6769917f5b2",
"systemd-sysctl.service,Apply Kernel Variables,uid=,,sz=705,fd9dc730b680ac1dd327b33a2c0ae7e908d4168ca0c1da20c31a91e0f92efe42",
"systemd-sysctl.service,Apply Kernel Variables,uid=,,sz=758,e426997ce176633ccda9e6bfc5ca2397b1c704a626ce9422f9473256efb1f011",
"systemd-sysusers.service,Create System Users,uid=,,sz=1024,bc4dee3c6fe5e865767badafe027e78957398ab3dcbab321f3c03b3011daf2b9",
"systemd-timesyncd.service,Network Time Synchronization,uid=systemd-timesync,,sz=1764,0e2cc5ea697a01cf8eef93cbadaaa029d23fb9759af459315ee0b3a349214303",
"systemd-timesyncd.service,Network Time Synchronization,uid=systemd-timesync,,sz=1768,f7e5b08e61f52c3fd8fc9d3f96668cc12109499a3e4eb74f0e91cf068e7e063a",
"systemd-timesyncd.service,Network Time Synchronization,uid=systemd-timesync,,sz=1821,8a426c7bf22c119a5b0c3180f559870e85fe39845e1add71f437f91552fc631c",
"systemd-tmpfiles-clean.timer,Daily Cleanup of Temporary Directories,uid=,,sz=539,5d0d5e43fba69a001527d4ef354971c9a089b64d7d88973f2c190f7d80b25c61",
"systemd-tmpfiles-setup-dev.service,Create Static Device Nodes in /dev,uid=,,sz=747,eb14a74c287994d145389f25032bcfec8dc7ee610e38c984a43945209bae2ce8",
"systemd-tmpfiles-setup.service,Create Volatile Files and Directories,uid=,,sz=787,e130f6a582f1ef16c6d35e918e6bd1a73a0513b807a918a9c5dcef2e6c9bc45c",
"systemd-tmpfiles-setup.service,Create Volatile Files and Directories,uid=,,sz=814,7987843104d68fd7dec2d7fccd544fdfdff84cb533447d3da633439046bd02f9",
"systemd-udevd-control.socket,udev Control Socket,uid=,,sz=650,7a5b56d487ff00b50c8e1cd73cdec138136f54da3e333f077e5398b5b61408b5",
"systemd-udevd-kernel.socket,udev Kernel Socket,uid=,,sz=624,42c2c6e0b77dd66b1bd885cd5c2cc82191662738c1e565950fcff3deabdcaa56",
"systemd-udevd.service,Rule-based Manager for Device Events and Files,uid=,,sz=1282,97a2c647997bc43e6200aecdb537d5a33d19ba6efe3e319e63be9706fbf36c0c",
"systemd-udevd.service,Rule-based Manager for Device Events and Files,uid=,,sz=1301,d28df830235ec1060f955502d1631d1816a058dfc8be5e36e1859e9cab13f0a3",
"systemd-udevd.service,Rule-based Manager for Device Events and Files,uid=,,sz=1331,708fe7ee7ceecfae134bbd0dc50b378f9410cbd3cbe562c845db5cc508ac5245",
"systemd-udevd.service,Rule-based Manager for Device Events and Files,uid=,,sz=1384,0ddffa5d779c8872396a1c9d126d6730a013f65464061a37e36c1922b7b241f0",
"systemd-udev-settle.service,Wait for udev To Complete Device Initialization,uid=,,sz=863,363f7496d0613fd14f020629e7057f54afe84c9c6d2b4d94153ac09f0aee8f5c",
"systemd-udev-trigger.service,Coldplug All udev Devices,uid=,,sz=752,59e381905530d776758d2ed936342cdc335a7c6ba07a34d2549e0d61da541c85",
"systemd-udev-trigger.service,Coldplug All udev Devices,uid=,,sz=763,62938df7c72dda0015db2747b112f9c9dc3e31b952eecc94f6aae9cbd2631b27",
"systemd-update-done.service,Update is Completed,uid=,,sz=682,5196e3618c02428ed18585ea31fe44574d421b5663bf12ce4e987697d117df62",
"systemd-update-done.service,Update is Completed,uid=,,sz=735,f87cf6c3cfa851d0515d6a17413b34be75df9617ca75172a5d946d64f2315229",
"systemd-update-utmp.service,Record System Boot/Shutdown in UTMP,uid=,,sz=799,6f5b2af992dc06e0104bfb6129f414b46c9f6b52513ab81f5bf80c8980b8b454",
"systemd-update-utmp.service,Record System Boot/Shutdown in UTMP,uid=,,sz=807,5a0d8833f798d7388c266c26bf36c8413564e70004717742ad6e7e04a66db4c7",
"systemd-update-utmp.service,Record System Boot/Shutdown in UTMP,uid=,,sz=913,6cfb271b6213c4f49e56b90da022d6c463e66a644b3df73c8fb64bc60e797f18",
"systemd-userdbd.service,User Database Manager,uid=,,sz=1171,8245c4c113ac234e412efdb740a662a9db6c67605d65090c878280fd37a51278",
"systemd-userdbd.socket,User Database Manager Socket,uid=,,sz=691,3a81e9864f20bcb4c117bf78a7ecdfdbdd9035577616b83fec4f4d0af1231fa3",
"systemd-user-sessions.service,Permit User Sessions,uid=,,sz=647,d3eacc48c36549ed292d8306bf50a00a68eea875eb906015759f55a8fdec722a",
"systemd-user-sessions.service,Permit User Sessions,uid=,,sz=655,e6680d505aefa23436ede13f05eba3ca7bc41531cc5f56c20efb340804a088de",
"systemd-user-sessions.service,Permit User Sessions,uid=,,sz=761,6413bab69c823859ad2781112bbd8ae29da61a713c5b42ce7a00c0f9686e2ecc",
"systemd-vconsole-setup.service,Setup Virtual Console,uid=,,sz=650,75791d21fa1a10d7d60c2eab1704d3e9adc109831819d1fbfaa1807310982015",
"tailscaled.service,Tailscale node agent,uid=,,sz=674,c5fa76fa23a0cd08fcdd447477858feafec2e0ac9bfe5f271d978af818d9ab76",
"tailscaled.service,Tailscale node agent,uid=,,sz=799,23423df7585fe927981664b706993fbf7ffb6d14267f32c5e039f348c6961be7",
"timers.target,Timer Units,uid=,,sz=458,c0ef1e24adda9b81ca8439a6a4060aeb730fbc3abf55e07e59852911cf523aa6",
"time-set.target,System Time Set,uid=,,sz=434,1dd72c1869b02dd88b836b6d426cc19dafcbc1fd76f6afb8e53ad3e068e4007f",
"tlp.service,TLP system startup/shutdown,uid=,,sz=501,fb58bcf89c811756aa83af67841bdcf5b6058e8bc4b08a2951ffbd7009218204",
"ua-timer.timer,Ubuntu Advantage Timer for running repeated jobs,uid=,,sz=170,64c6be9cf92d35f31ea5e18f140190f49d7050d95a4225f9c50d25a86e5bdc75",
"udisks2.service,Disk Manager,uid=,,sz=203,bbf204fb935e0e1b2662b971e7dd5b475038097cb338a8075146d5e611473f23",
"udisks2.service,Disk Manager,uid=,,sz=207,edbe6a50b0f8bdbd29f01fba10e96333c3523c2c1cbb6d91c1326da99b2ff3c2",
"ufw.service,Uncomplicated firewall,uid=,,sz=333,7b8042cb70b1acd9bbc3a4cf8a08c41700c986d62499b8852113c551cab1082a",
"unattended-upgrades.service,Unattended Upgrades Shutdown,uid=,,sz=377,642331d3861bcc5e41342b9b93ad96b1852447d5b10533b9b2988531cfd2860a",
"unbound-anchor.timer,daily update of the root trust anchor for DNSSEC,uid=,,sz=346,52832bb5a11045ba390f5ea0933faf1b52f23b6ee91bfd47a159ba734f927139",
"updatedb.timer,Daily locate database update,uid=,,sz=113,94520117a4a2e16b5f2311c406904369d72690b8998c39ee4cf758009fdddbcb",
"update-notifier-download.timer,Download data for packages that failed at package install time,uid=,,sz=268,78f01ff5be8b01eee4c438d6a7971dcb9f34687cb75bd0d61f754eb5eb42ad22",
"update-notifier-motd.timer,Check to see whether there is a new version of Ubuntu available,uid=,,sz=301,7e5fa1f167ad72cf1bd0421d72ca3017ccb5a62f98d91ec3f9e25efd46c2a9ef",
"upower.service,Daemon for power management,uid=,,sz=990,a5b48717ff682ae1c8c1c23925cb9d37b1eacc4a22a110bc73958225e7215ccc",
"upower.service,Daemon for power management,uid=,,sz=994,c6d300b60a7dd2e9186152b8bc4fd1557ec2977027d0a24b06304d31f6e4124c",
"uresourced.service,User resource assignment daemon,uid=,,sz=388,4c09d9ba4055ec4d065f312c531a2f9d3b434f40024143788ac2fa2539abeab8",
"user.slice,User and Session Slice,uid=,,sz=440,502efa90338cff5781e7d63195906700a868094154864add8f38d252feed2715",
"uuidd.socket,UUID daemon activation socket,uid=,,sz=126,21f7cc7b5ffaf73b27f00689e628797a2be947df144b1a0f7ba9356c8d0a4897",
"veritysetup.target,Local Verity Protected Volumes,uid=,,sz=427,3923f4680c1e639d447894a093f09f3729c69f45e78becb2558a785a9ecf24f7",
"virtinterfaced.socket,Libvirt interface local socket,uid=,,sz=236,36afc501906479419dbd7ea2700e83217f988b58887d8911e439c60468c76870",
"virtlockd.socket,Virtual machine lock manager socket,uid=,,sz=181,003c448b4f8547cc2ca749cb15e6a0bb02f8227d6bf0b662f7dcb71ca92d07e0",
"virtlogd-admin.socket,Virtual machine log manager socket,uid=,,sz=256,7fbfe7e23be567942293893893f492bb2ee2291332c837494ca11b55229351d8",
"virtlogd.service,Virtual machine log manager,uid=,,sz=823,0bce0781312e4d3bbe3226486cb39676f32a112167bfaa30b6c39c82b03ff9b4",
"virtlogd.socket,Virtual machine log manager socket,uid=,,sz=179,0890061c0e2b42729d8c22540e96a7f52ab83b4668809461855b1fac43b23bb5",
"virtnetworkd.socket,Libvirt network local socket,uid=,,sz=228,a2c1414bc946fc4a202d6b3658e284edd658f9e2f048bba42d3ad9c5e3189abd",
"virtnodedevd.socket,Libvirt nodedev local socket,uid=,,sz=228,6345deb9cce287a6b7d11d6d262f6841f4ab3fb7fedfd073c73d4fb35f0a8d17",
"virtnwfilterd.socket,Libvirt nwfilter local socket,uid=,,sz=232,058bddf67b51e1c35618f1ee8483723ba3f0b115c47da98a7d0b1a38b9f1ffdb",
"virtproxyd.socket,Libvirt proxy local socket,uid=,,sz=323,6c1339b4538c9d6516aea1615eb7acb9708b73f6b24a3d348bce77b2af5c6b6f",
"virtqemud-admin.socket,Libvirt qemu admin socket,uid=,,sz=253,c364fe852cae099c7261724cd1130c241f11a7147aa0cde9feb440e3885f2ee5",
"virtqemud-ro.socket,Libvirt qemu local read-only socket,uid=,,sz=260,44507191e8d4c2de4ee5b071da6f41e6255d760b0c438b606cf7fec552143d4f",
"virtqemud.socket,Libvirt qemu local socket,uid=,,sz=216,f98db5798df842d1de395dae185c02bfa4ac5b2b596ceab74fbc1124a3d4ea73",
"virtsecretd.socket,Libvirt secret local socket,uid=,,sz=224,172554a4fd92b6701c4d520fc829ba38df425f53920285530df080ac4cc5b30c",
"virtstoraged.socket,Libvirt storage local socket,uid=,,sz=228,01a015f5fe6ac655057d194c4b575c384b3c06e9d92065052d4a2cef9c5807fa",
"whoopsie.path,Start whoopsie on modification of the /var/crash directory,uid=,,sz=147,448d165321895eafe45d5e0aa53de567af910d405335ca6a205f5213a4e5da73",
"wpa_supplicant.service,WPA supplicant,uid=,,sz=310,66517766a8bcb08a6b2d3b2c7c8073ca9152f09310d0fb09ac56096d2a79617f",
"wpa_supplicant.service,WPA supplicant,uid=,,sz=342,435205ace207fc22db0b0518fc67fdaa98c726753351f26e916fa714a359ac1a",
"wpa_supplicant.service,WPA supplicant,uid=,,sz=347,02e11fbf43d228084b5859dd014e360b09f3f9c6115d5b5fbddd37f9111793ad",
"zfs-import-cache.service,Import ZFS pools by cache file,uid=,,sz=582,00e987ef4cea1daa258b94b09eba151add4bfabfafe5d89b79d7b1d4a90d953c",
"zfs-import.target,ZFS pool import target,uid=,,sz=101,84e3c4c74ef31f07e7880543bfcd3def83969ed31b7d7aaf54074782ad5fb670",
"zfs-load-key-rpool.service,Load ZFS key for rpool,uid=,/etc/zfs/zfs-list.cache/rpool,sz=790,7d15b55b20bc431fb67c144786a2db18aeb44cb374cdd5be8fe1df23e973d80f",
"zfs-load-module.service,Install ZFS kernel module,uid=,,sz=356,416a74224413bbbad032848641cfa53d7274b3702d1e1fd97e7337f23d32d840",
"zfs-mount.service,Mount ZFS filesystems,uid=,,sz=378,0f684c3ec55652e7b596f0c2682d0a755bdf467f823d6c797ae46b962d185f12",
"zfs-mount.service,Mount ZFS filesystems,uid=,,sz=406,14d7c35cfbd179d2a17e16c087dc7d911c3abe27e489a38a2c1ddc37c98e93c7",
"zfs-scrub.timer,zfs-scrub.timer,uid=,,sz=78,d5eba31488c568d6a8146ea44115f32d0257cb23a335d0fea5dd1e18afa0132b",
"zfs-share.service,ZFS file system shares,uid=,,sz=433,0d88aeea84598ba5deee91e491e25a42107723ddeefb67d980a50383c824e732",
"zfs-share.service,ZFS file system shares,uid=,,sz=490,fb106561e05f884c155774ee379a1287004aee24613db2de2b3b4d2b008aaf7b",
"zfs-snapshot-daily.timer,zfs-snapshot-daily.timer,uid=,,sz=49,692c497065fa7430cf3ef9c39d71c26ddd23d4ed1f3c6d15a78ebdc8901c60bf",
"zfs-snapshot-frequent.service,ZFS auto-snapshotting every 15 mins,uid=,,sz=1092,3bd9d524baabe999335378c3dc8d4823c5ace79d172eeb9d3d584d8ba521e7a6",
"zfs-snapshot-frequent.timer,zfs-snapshot-frequent.timer,uid=,,sz=56,b9ab99d4fc4e3da81f163c6bc720d68ba2faa70cabb2c94c1e65347166551520",
"zfs-snapshot-hourly.timer,zfs-snapshot-hourly.timer,uid=,,sz=50,3d876dbf234e09d8ff1525a20f0af9e40014f2828776fab3f8b946eee138cfc0",
"zfs-snapshot-monthly.timer,zfs-snapshot-monthly.timer,uid=,,sz=51,77519e4ae82c232a84437a5e226f65d1bc3fba1b3e5ebf05df33c8eee2d198b0",
"zfs-snapshot-weekly.timer,zfs-snapshot-weekly.timer,uid=,,sz=50,f940747ee60b6003820edacb893bc8595463ddaa47b28de75882e8881388f842",
"zfs.target,ZFS startup target,uid=,,sz=76,04bc085198b464b7a77374472374e099593241f59d7ed2676905e58b62c8d301",
"zfs-volumes.target,ZFS volumes are ready,uid=,,sz=135,8d4ad63b2a8aeeb3e01361b0cd22440e13b8ebb796f3e313b5c208f0ce04aabe",
"zfs-volume-wait.service,Wait for ZFS Volume (zvol) links in /dev,uid=,,sz=291,0a9db1010f54f5f7a8883c75a557e5005b73912d2dd0569142abe9df5da64b45",
"zfs-zed.service,ZFS Event Daemon (zed),uid=,,sz=266,6b0fd1d60282959f9fc1decc8bd9aae4bb2650eee201b3bc741dbe88ba1cc4b8",
"znapzend.service,ZnapZend - ZFS Backup System,uid=root,,sz=1723,58e7b27685746368b5bfec27651433c9087b0916531f72f7de1695e0789bdafa",
"zpool-trim.timer,zpool-trim.timer,uid=,,sz=50,f940747ee60b6003820edacb893bc8595463ddaa47b28de75882e8881388f842"
)
OR id LIKE 'blockdev@dev-mapper-luks%.target'
OR id LIKE 'blockdev@dev-mapper-nvme%.target'
OR id LIKE 'dbus-:%-org.freedesktop.problems@0.service'
OR id LIKE 'dev-disk-by%.swap'
OR id LIKE 'dev-mapper-%.swap'
OR id LIKE 'dev-zram%.swap'
OR id LIKE 'docker-%.scope'
OR id LIKE 'getty@tty%.service'
OR id LIKE 'home-manager-%.service'
OR id LIKE 'lvm2-pvscan@%.service'
OR id LIKE 'session-%.scope'
OR id LIKE 'system-systemd%cryptsetup.slice'
OR id LIKE 'systemd-backlight@%.service'
OR id LIKE 'systemd-cryptsetup@luks%.service'
OR id LIKE 'systemd-cryptsetup@nvme%.service'
OR id LIKE 'systemd-fsck@dev-disk-by%service'
OR id LIKE 'systemd-zram-setup@zram%.service'
OR id LIKE 'user-runtime-dir@%.service'
OR id LIKE 'user@%.service'
OR id LIKE 'akmods@%64.service'
)
)