Benign arch Download

upower 1.91.3-1

Legitimate Arch Linux package

Service file declares User=rootShell command execution capability

SHA-25661fb1fc99fb4ac7c37cf19eb2c1e3b895af797108ddcfc9b68a0d97d4b9c55b0

URLhttps://archlinux.org/packages/extra/x86_64/upower/download/

Evidence

Get terminal attributes upowerd · 0x4b43–0x4ba3

0x4b43795f61735f696e7400737472746f6c00y_as_int.strtol.
0x4b537463676574617474720063666d616b65tcgetattr.cfmake
0x4b6372617700636673657469737065656400raw.cfsetispeed.
0x4b7363667365746f7370656564007463666ccfsetospeed.tcfl
0x4b837573680074637365746174747200675fush.tcsetattr.g_
0x4b93646275735f6f626a6563745f70726f78dbus_object_prox
0x4ba3795f6765745f636f6e6e656374      y_get_connect   

Shell command execution capability upowerd · 0x224c4–0x224f4

0x224c46e696d68006c6966650073636f706500nimh.life.scope.
0x224d473797374656d00756e6b6e6f776e006esystem.unknown.n
0x224e46f74206368617267696e6700756e6b6eot charging.unkn
0x224f46f776e207374                    own st          

Checks hardware model for VM upowerd · 0x25300–0x25350

0x253002573206f6e2064657669636520257300%s on device %s.
0x253102f7379732f646576696365732f766972/sys/devices/vir
0x253207475616c2f646d692f69642f70726f64tual/dmi/id/prod
0x253307563745f6e616d650000000000000000uct_name........
0x253404e6f2064657669636573207769746820No devices with 
0x25350706172656e742025                parent %        

Python module-level function call _upower · lines 1–9

1#compdef upower
2_enumerate_objects() {
3	local expl
4	local -a objects
⋯5 lines

Service file declares User=root org.freedesktop.UPower.service · lines 1–6

1:3… -BUS Service]
2Name=org.freedesktop.UPower
3Exec=/usr/lib/upowerd
4User=root
5SystemdService=upower.service
6

No evidence locations were recorded for this file. Raw result