LFD wp-toolkit whitelist commands in /var/log/secure

leonep

leonep

Well-Known Member
Nov 18, 2014
234
19
68
Pescara
cPanel Access Level
Root Administrator
Hi,
i have a lot of lines in /var/log/secure about wptoolkit commands, like this:

/var/log/secure:
Dec 9 07:00:00 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=myuser ;
COMMAND=/bin/cagefs_enter stat -c %a /home/myuser/.wp-toolkit/tmp.EIM3EBI3iE
Dec 9 07:00:02 server sudo: wp-toolkit : TTY=unknown ; PWD=/usr/local/cpanel/3rdparty/wp-toolkit/scripts ; USER=user22 ;
COMMAND=/bin/cagefs_enter mv /home/user22/.wp-toolkit/tmp-wpt-tmp-gkaHvC21CVgoIT37.EIM3EBI3iE

any help to find the right way to whitelist this entries ?
thank you
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
P lfd on example.com SYSLOG Check Failed - Problem with logging. Security 4
Otávio Serra lfd - Suspicious process running under user nobody Security 5
eventtex LFD - Suspicious process running under user postgres Security 7
J lfd on server.com: Suspicious process running under user username Security 6
M Very high CPU loads from brute force attempts - CSF/LFD Security 14
Similar threads
lfd on example.com SYSLOG Check Failed - Problem with logging.
lfd - Suspicious process running under user nobody
LFD - Suspicious process running under user postgres
lfd on server.com: Suspicious process running under user username
Very high CPU loads from brute force attempts - CSF/LFD
Top Bottom