Hi Bill,
Am Samstag, 26. Februar 2022 schrieb William Morder via tde-users:
I've tried to track them down to their source, so
far with no
luck.
What have you tried?
I think I already posted this information. These were the processes,
as far as I could trace them at that time.
$ ls -l /proc/2666/exe
17:46 /proc/2666/exe -> /usr/libexec/geoclue-2.0/demos/agent
$ ls -l /proc/2660/exe
17:46 /proc/2660/exe -> /usr/bin/python3.9
$ ls -l /proc/2656/exe
17:46 /proc/2656/exe -> /usr/libexec/at-spi-bus-launcher
$ sed -e 's/\x00/ /g' /proc/2660/cmdline
/usr/bin/python3 /usr/share/system-config-printer/applet.py
If you know the name of the executable or part of it, then you could use
dpkg to find out with which package it has been installed.
man dpkg:
dpkg-query actions
[…]
-S, --search filename-search-pattern...
Search for a filename from installed packages.
On my system (Devuan Beowulf aka Debian Buster):
$ dpkg -S at-spi-bus-launcher
at-spi2-core: /usr/lib/at-spi2-core/at-spi-bus-launcher
It says that the file "/usr/lib/at-spi2-core/at-spi-bus-launcher" is
from package at-spi2-core.
Now, aptitude could tell you why it has been installed:
$ aptitude why at-spi2-core
i gtk3-tqt-engine-trinity Depends libgtk-3-0 (>= 3.5.8)
i A libgtk-3-0 Depends libatk-bridge2.0-0 (>= 2.5.3)
i A libatk-bridge2.0-0 Depends libatspi2.0-0 (>= 2.9.90)
i A libatspi2.0-0 Recommends at-spi2-core (= 2.30.0-7)
So, on this system of mine it has been installed as a recommends.
Probably with the initial installation because I usually switch off
recommends. I probably could also remove it without further damage but
I'm not sure. Didn't RTFM.
HTH
Kind regards,
Stefan