systemd-update-utmp-runlevel.service, systemd-update-utmp-shutdown.service, systemd-update-utmp — Write audit and utmp updates at runlevel changes and shutdown
systemd-update-utmp-runlevel.service
systemd-update-utmp-shutdown.service
/usr/lib/systemd/systemd-update-utmp
systemd-update-utmp-runlevel.service
is a service that writes SysV runlevel changes to utmp
and wtmp, as well as the audit logs, as they
occur. systemd-update-utmp-shutdown.service
does the same for shut-down requests.