Apple

pipelined #

 full_path = "/usr/libexec/pipelined"
 runs_as = "root"

pkd #

 full_path = "/usr/libexec/pkd"
 runs_as = "root"

Daemon for the PlugInKit subsystem, typically handles plugins/extensions.

powerd #

 full_path = "/System/Library/CoreServices/powerd.bundle/powerd"
 runs_as = "root"

Daemon responsible for managing energy preferences.

Moreover, “powerd” is the one responsible for putting the system to sleep after it is idle. The same thing is also relevant when the display shuts off/disks spin now.

PowerUIAgent #

 full_path = "/usr/libexec/PowerUIAgent"
 runs_as = "mobile"

Processes #

A process is an independent, self-contained unit that contains the code and data necessary to execute a specific task or set of tasks. Each process in iOS operates in its own protected memory space, ensuring isolation and security.

in iOS processes can run either :

as root for priviliged processes.
as mobile for unpriviledged processes.

Please note that some special daemons can run with a specific user :

/usr/libexec/logd running as _logd.

A process can be either belong to :

...

profiled

Apple

profiled #

 full_path = "/usr/libexec/profiled"
 runs_as = "mobile"

progressd

Apple

progressd #

 full_path = "/System/Library/Frameworks/ClassKit.framework/progressd"
 runs_as = "mobile"

progressd is the ClassKit sync agent. It handles syncing classes, class members, student handouts and progress data between student and teacher managed Apple ID accounts.

The binary is a part of ClassKit framework.

ProtectedCloudKeySyncing

Apple

ProtectedCloudKeySyncing #

 full_path = "/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing"
 runs_as = "mobile"

ps

Apple

ps #

 full_path = "bin/ps"

Process with SUID bit on owned by root.
Standard *Nix Process listing utility.