Check dependencies, it might have been installed that way.
Might be used by network-manager to auto connect to VPNs, if you have something like that set up for untrusted networks? Other distros do something similar for OpenVPN, Wireguard and such.
Remove it and see what breaks?
Take your device offline, asap.
ls -l
on the executables (you'll have to find them yourself) will give the last modified time.
If it's logging to the journal, you can grep through that and find the first time it logged.
If it truely is malicious, none of those will be trustworthy, as they can be changed by a malicious actor. If you can't work out where it's from, wipe and start over is probably the best bet.
The strongswan installation itself doesn't seem to be malicous.
It looks like these packages were installed via the apt repositories:
strongswan-starter
strongswan-libcharon
strongswan-charon
libstrongswan
Check /var/log/dpkg.log. See when they were installed, probably alongside something you wanted.
Regarding the edit:
As far as I know your bash just tells you the purge commands were run but not if they were successful.
It also seems like the first purge would have removed all strongswan* package anyway so it sounds likely that you attempted to purge strongswan and decided not to. Maybe seeing the things that would be broken at the time you decided to reduce the scope of the great purge of strongswan in 2022 :)
Maybe OMV installs it by default?
Linux
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0