/run/utmp

/run/utmp records users that are currently logged in.

Apparently, this file is created dynamically by the system's boot scripts.

The group-owner of this file is utmp.