Comment # 3 on bug 1231155 from Michael Andres

(In reply to Nick Dordea from comment #2)
> Now, zypper ps -r reports for haveged the info that it is service .
> The issue is solved.
> Something strange happens. After a shutdown+boot sequence 
> haveged appears as being deleted even if haveged is started at boot time.

Hi Nick, it might be due to the way haveged launches.

> The following running processes use deleted files:
> PID | PPID | UID | User | Command           | Service
> ----+------+-----+------+-------------------+--------
> 221 | 1    | 0   | root | haveged (deleted) | haveged

What zypper sees is a process 'haveged' with PID 221. It still uses meanwhile
removed files, which were likely removed by a package update.

Whether a process is associated with a service is guessed by looking at the
"/proc/PID/cgroup" file:

> #For PID=221:
> sudo cat /proc/221/cgroup

This is the output I'd need to see (it's just a few lines). Ideally one for the
working case, where the PID was correctly associated with the service, and one
for the wrong case.

In the wrong case and just if PPID is not 1:

> # replace PPID 
> sudo cat /proc/PPID/cgroup
> ps l PPID