pipelined

pipelined # full_path = "/usr/libexec/pipelined" runs_as = "root"

pkd

pkd # full_path = "/usr/libexec/pkd" runs_as = "root" Daemon for the PlugInKit subsystem, typically handles plugins/extensions.

powerd

powerd # full_path = "/System/Library/CoreServices/powerd.bundle/powerd" runs_as = "root" Daemon responsible for managing energy preferences. Moreover, “powerd” is the one responsible for putting the system to sleep after it is idle. The same thing is also relevant when the display shuts off/disks spin now.

PowerLogs

PowerUIAgent

PowerUIAgent # full_path = "/usr/libexec/PowerUIAgent" runs_as = "mobile"

Processes

Processes # A process is an independent, self-contained unit that contains the code and data necessary to execute a specific task or set of tasks. Each process in iOS operates in its own protected memory space, ensuring isolation and security. in iOS processes can run either : as root for priviliged processes. as mobile for unpriviledged processes. Please note that some special daemons can run with a specific user : ...

profiled

profiled # full_path = "/usr/libexec/profiled" runs_as = "mobile"

progressd

progressd # full_path = "/System/Library/Frameworks/ClassKit.framework/progressd" runs_as = "mobile" progressd is the ClassKit sync agent. It handles syncing classes, class members, student handouts and progress data between student and teacher managed Apple ID accounts. The binary is a part of ClassKit framework.

ProtectedCloudKeySyncing

ProtectedCloudKeySyncing # full_path = "/System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing" runs_as = "mobile"

ps

ps # full_path = "bin/ps" Process with SUID bit on owned by root. Standard *Nix Process listing utility.