Some processes that are part of the core os that one might want to target

dm blkdeactivate: init system domain that maintains a file in /tmp that mount wants to be able to read
logging augenrules: init system domain that maintainss content in /tmp
dracut-initramfs: init system domain that maintains /run/initramfs
systemd-shutdown: pid1 during shutdown


-- 
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift