/etc
NameSizeModeActions
alsa/-0755rm
alternatives/-0755rm
apache2/-0755rm
audit/-0750rm
authselect/-0755rm
bash_completion.d/-0755rm
binfmt.d/-0755rm
bluetooth/-0555rm
cagefs/-0755rm
chkconfig.d/-0755rm
chkserv.d/-0755rm
cifs-utils/-0755rm
cl.selector/-0755rm
cpanel/-0751rm
cron.d/-0755rm
cron.daily/-0755rm
cron.hourly/-0755rm
cron.monthly/-0755rm
cron.weekly/-0755rm
crypto-policies/-0755rm
dbus-1/-0755rm
dconf/-0755rm
debuginfod/-0755rm
default/-0755rm
depmod.d/-0755rm
dhcp/-0755rm
dnf/-0755rm
dovecot/-0755rm
dpkg/-0755rm
dracut.conf.d/-0755rm
egl/-0755rm
environment-modules/-0755rm
exports.d/-0755rm
firewalld/-0750rm
flatpak/-0755rm
fonts/-0755rm
fwupd/-0755rm
gcrypt/-0755rm
geoclue/-0755rm
glvnd/-0755rm
gnupg/-0755rm
groff/-0755rm
grub.d/-0700rm
gss/-0755rm
gssproxy/-0755rm
ImageMagick-6/-0755rm
imunify-agent-proxy/-0700rm
imunify360/-0755rm
init.d/-0755rm
iproute2/-0755rm
issue.d/-0755rm
kdump/-0755rm
kernel/-0755rm
keys/-0755rm
keyutils/-0755rm
krb5.conf.d/-0755rm
ld.so.conf.d/-0755rm
libibverbs.d/-0755rm
libnl/-0755rm
libpaper.d/-0755rm
libreport/-0755rm
libssh/-0755rm
logrotate.d/-0755rm
lvm/-0755rm
lynis/-0755rm
mail/-0755rm
microcode_ctl/-0755rm
modprobe.d/-0755rm
modulefiles/-0755rm
modules-load.d/-0755rm
motd.d/-0755rm
my.cnf.d/-0755rm
named/-0750rm
needrestart/-0755rm
NetworkManager/-0755rm
nftables/-0700rm
nginx/-0755rm
openldap/-0755rm
opt/-0755rm
ostree/-0755rm
pam.d/-0755rm
pcp/-0755rm
pdns/-0755rm
pkcs11/-0755rm
pkgconfig/-0755rm
pki/-0755rm
pm/-0755rm
polkit-1/-0755rm
popt.d/-0755rm
profile.d/-0755rm
proftpd/-0751rm
pulse/-0755rm
pure-ftpd/-0755rm
rc.d/-0755rm
rc0.d/-0755rm
rc1.d/-0755rm
rc2.d/-0755rm
rc3.d/-0755rm
rc4.d/-0755rm
rc5.d/-0755rm
rc6.d/-0755rm
request-key.d/-0755rm
rpm/-0755rm
rsyslog.d/-0755rm
rwtab.d/-0755rm
samba/-0755rm
sasl2/-0755rm
scl/-0755rm
security/-0755rm
selinux/-0755rm
sgml/-0755rm
skel/-0755rm
smartmontools/-0755rm
ssh/-0755rm
ssl/-0755rm
sssd/-0700rm
statetab.d/-0755rm
sudoers.d/-0750rm
sw-engine/-0755rm
sysconfig/-0755rm
sysctl.d/-0755rm
systemd/-0755rm
terminfo/-0755rm
tmpfiles.d/-0755rm
tpm2-tss/-0755rm
udev/-0755rm
UPower/-0755rm
valiases/-0751rm
vdomainaliases/-0751rm
vfilters/-0751rm
vmware-tools/-0755rm
vulkan/-0755rm
wireplumber/-0755rm
X11/-0755rm
xdg/-0755rm
xml/-0755rm
yum/-0755rm
yum.repos.d/-0755rm
.pwd.lock00600editdlrm
.updated2080644editdlrm
.whostmgrft00644editdlrm
adjtime160644editdlrm
agent360-token.ini720640editdlrm
agent360.ini9620640editdlrm
agent360.ini.rpmnew8170600editdlrm
agent360.ini.rpmsave9510640editdlrm
aliases15290644editdlrm
almalinux-release370644editdlrm
anacrontab5410644editdlrm
antivirus.exim106340644editdlrm
asound.conf550644editdlrm
at.deny10644editdlrm
backupmxhosts00640editdlrm
bashrc34590644editdlrm
bindresvport.blacklist5350644editdlrm
blocked_incoming_email_countries00640editdlrm
blocked_incoming_email_country_ips00640editdlrm
blocked_incoming_email_domains00640editdlrm
chrony.conf13740644editdlrm
chrony.keys5400640editdlrm
cpanel_exim_system_filter121440644editdlrm
cpanel_mail_netblocks150640editdlrm
cpbackup-exclude.conf1470644editdlrm
cpsources.conf.plugins.example28430644editdlrm
cpspamd.conf00644editdlrm
cpupdate.conf1110644editdlrm
cron.deny70644editdlrm
crontab4510644editdlrm
crypttab00600editdlrm
csh.cshrc14010644editdlrm
csh.login11120644editdlrm
dbowners7730640editdlrm
demodomains00640editdlrm
demouids00640editdlrm
demousers00640editdlrm
digestshadow00640editdlrm
DIR_COLORS46730644editdlrm
DIR_COLORS.lightbgcolor47550644editdlrm
domainips830644editdlrm
domainusers10040640editdlrm
domain_remote_mx_ips.cdb64060640editdlrm
dracut.conf1170644editdlrm
email_send_limits34970640editdlrm
environment00644editdlrm
ethertypes13620644editdlrm
exim.conf886510644editdlrm
exim.conf.dist264080644editdlrm
exim.conf.localopts20930644editdlrm
exim.conf.localopts.shadow00600editdlrm
exim.conf.mailman2.dist297290644editdlrm
exim.conf.mailman2.exiscan.dist299040644editdlrm
exim.crt56790660editdlrm
exim.key16790660editdlrm
exim.pl2310644editdlrm
exim.pl.local4989770644editdlrm
eximmailtrap00644editdlrm
eximrejects1630644editdlrm
eximrejects.rpmorig3670644editdlrm
exim_suspended_list7150640editdlrm
exim_trusted_configs240644editdlrm
exports00644editdlrm
favicon.png2260644editdlrm
filesystems660644editdlrm
freetds.conf11540644editdlrm
fstab7860644editdlrm
ftpd-ca.pem00660editdlrm
ftpd-rsa-key.pem16790660editdlrm
ftpd-rsa.pem56790660editdlrm
fuse.conf380644editdlrm
GREP_COLORS940644editdlrm
greylist_common_mail_providers697220644editdlrm
greylist_trusted_netblocks00640editdlrm
group18880644editdlrm
group-18730644editdlrm
grub2-efi.cfg-0editdlrm
grub2.cfg-0editdlrm
gshadow15370600editdlrm
gshadow-15260600editdlrm
host.conf90644editdlrm
hostname260644editdlrm
hosts2190644editdlrm
idmapd.conf57990644editdlrm
inittab4900644editdlrm
inputrc9430644editdlrm
ipaddrpool690644editdlrm
ips2540644editdlrm
issue230644editdlrm
issue.net220644editdlrm
kdump.conf90770644editdlrm
krb5.conf8800644editdlrm
ld.so.cache390790644editdlrm
ld.so.conf280644editdlrm
libaudit.conf1910640editdlrm
libuser.conf23910644editdlrm
localaliases480644editdlrm
localdomains15160640editdlrm
localdomains.rpmnew00644editdlrm
locale.conf150644editdlrm
locales.conf3700644editdlrm
localtime35520644editdlrm
lock_manager_local.ini8290644editdlrm
login.defs77790644editdlrm
logrotate.conf4960644editdlrm
machine-id330444editdlrm
magic1110644editdlrm
mailbox_formats6890640editdlrm
mailcap2720644editdlrm
mailhelo280640editdlrm
mailips00640editdlrm
makedumpfile.conf.sample51220644editdlrm
manualmx10640editdlrm
man_db.conf52350644editdlrm
mime.types674540644editdlrm
mke2fs.conf12080644editdlrm
motd00644editdlrm
mtab00444editdlrm
my.cnf14800644editdlrm
named.conf181030644editdlrm
named.conf.cache23400600editdlrm
named.conf.precpanelinstall17390640editdlrm
named.conf.prerebuilddnsconfig35150644editdlrm
named.conf.rebuilddnsconfig35150644editdlrm
named.conf.zonedir.cache570600editdlrm
named.rfc1912.zones10290640editdlrm
named.root.key6860644editdlrm
nanorc103730644editdlrm
neighbor_netblocks460640editdlrm
netconfig7670644editdlrm
networks580644editdlrm
nfs.conf16510644editdlrm
nfsmount.conf36040644editdlrm
nocgiusers110640editdlrm
nscd.conf27290644editdlrm
nsswitch.conf21240644editdlrm
nsswitch.conf.bak21080644editdlrm
odbc.ini00644editdlrm
odbcinst.ini18960644editdlrm
os-release5720644editdlrm
outgoing_mail_hold_users00640editdlrm
outgoing_mail_suspended_users250640editdlrm
papersize680644editdlrm
passwd55640644editdlrm
passwd-55210644editdlrm
passwd.cache314190600editdlrm
passwd.nouids.cache161970600editdlrm
pcp.conf73380644editdlrm
pool.conf2190644editdlrm
printcap2330644editdlrm
profile27000644editdlrm
protocols65680644editdlrm
pure-ftpd.conf111080600editdlrm
pure-ftpd.pem73580660editdlrm
rc.local4740644editdlrm
recent_authed_mail_ips290644editdlrm
recent_authed_mail_ips_users2090644editdlrm
recent_recipient_mail_server_ips10510640editdlrm
redhat-release370644editdlrm
relayhosts290644editdlrm
relayhostsusers2090644editdlrm
remotedomains2530644editdlrm
request-key.conf17870644editdlrm
resolv.conf1020644editdlrm
rpc16340644editdlrm
rsyncd.conf4580644editdlrm
rsyslog.conf33000644editdlrm
s-nail.rc96240444editdlrm
secondarymx00640editdlrm
senderverifybypasshosts00640editdlrm
services6922520644editdlrm
sestatus.conf2160644editdlrm
shadow60970600editdlrm
shadow-60970600editdlrm
shadow.nouids.cache197540600editdlrm
shells1280644editdlrm
skipsmtpcheckhosts00640editdlrm
spammeripblocks00640editdlrm
spammers00644editdlrm
ssldomains00600editdlrm
stats.conf370644editdlrm
subgid200644editdlrm
subgid-00644editdlrm
subuid200644editdlrm
subuid-00644editdlrm
sudo-ldap.conf31810640editdlrm
sudo.conf43560640editdlrm
sudoers43280440editdlrm
sysctl.conf4490644editdlrm
system-release370644editdlrm
system-release-cpe370644editdlrm
trueuserdomains10040640editdlrm
trueuserowners6370640editdlrm
trusted-key.key3750644editdlrm
trustedmailhosts00640editdlrm
trusted_mail_users00640editdlrm
userbwlimits7300640editdlrm
userdatadomains123850640editdlrm
userdatadomains.json135480640editdlrm
userdomains26090640editdlrm
userips8520640editdlrm
userplans7800640editdlrm
vconsole.conf280644editdlrm
virc11840644editdlrm
webspam00644editdlrm
wgetrc49250644editdlrm
wwwacct.conf2570644editdlrm
wwwacct.conf.cache3260644editdlrm
wwwacct.conf.shadow860600editdlrm
wwwacct.conf.shadow.cache4360600editdlrm
xattr.conf8170644editdlrm
yum.conf2160644editdlrm
Edit: /etc/passwd- (5521B)
root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin systemd-coredump:x:999:997:systemd Core Dumper:/:/sbin/nologin dbus:x:81:81:System message bus:/:/sbin/nologin tss:x:59:59:Account used for TPM access:/:/sbin/nologin sssd:x:998:995:User for sssd:/:/sbin/nologin chrony:x:997:994:chrony system user:/var/lib/chrony:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/usr/share/empty.sshd:/sbin/nologin systemd-oom:x:992:992:systemd Userspace OOM Killer:/:/usr/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/usr/sbin/nologin named:x:25:25:Named:/var/named:/sbin/nologin mailman:x:991:991:GNU Mailing List Manager:/usr/local/cpanel/3rdparty/mailman:/usr/local/cpanel/bin/noshell cpanel:x:990:990::/var/cpanel/userhomes/cpanel:/usr/local/cpanel/bin/noshell cpanelcabcache:x:989:989::/var/cpanel/userhomes/cpanelcabcache:/usr/local/cpanel/bin/noshell cpanellogin:x:988:988::/var/cpanel/userhomes/cpanellogin:/usr/local/cpanel/bin/noshell cpaneleximfilter:x:987:987::/var/cpanel/userhomes/cpaneleximfilter:/usr/local/cpanel/bin/noshell cpaneleximscanner:x:986:986::/var/cpanel/userhomes/cpaneleximscanner:/usr/local/cpanel/bin/noshell cpanelroundcube:x:985:985::/var/cpanel/userhomes/cpanelroundcube:/usr/local/cpanel/bin/noshell cpanelconnecttrack:x:984:984::/var/cpanel/userhomes/cpanelconnecttrack:/usr/local/cpanel/bin/noshell cpanelanalytics:x:983:983::/var/cpanel/userhomes/cpanelanalytics:/usr/local/cpanel/bin/noshell cpses:x:982:982::/var/cpanel/cpses:/sbin/nologin mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/false dovecot:x:97:97:Dovecot IMAP server:/usr/libexec/dovecot:/sbin/nologin dovenull:x:981:981:Dovecot's unauthorized user:/usr/libexec/dovecot:/sbin/nologin mailnull:x:47:47:Exim:/var/spool/mqueue:/bin/false cpanelphppgadmin:x:980:979:phpPgAdmin for cPanel & WHM:/var/cpanel/userhomes/cpanelphppgadmin:/usr/local/cpanel/bin/noshell cpanelphpmyadmin:x:979:978:phpMyAdmin for cPanel & WHM:/var/cpanel/userhomes/cpanelphpmyadmin:/usr/local/cpanel/bin/noshell polkitd:x:978:976:User for polkitd:/:/sbin/nologin rtkit:x:172:172:RealtimeKit:/proc:/sbin/nologin rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin pipewire:x:977:975:PipeWire System Daemon:/var/run/pipewire:/sbin/nologin geoclue:x:976:974:User for geoclue:/var/lib/geoclue:/sbin/nologin flatpak:x:975:973:User for flatpak system helper:/:/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin wp-toolkit:x:974:971::/usr/local/cpanel/3rdparty/wp-toolkit/var:/bin/false dyejet2:x:1001:1002::/home/dyejet2:/usr/local/cpanel/bin/jailshell power1:x:1002:1003::/home/power1:/usr/local/cpanel/bin/jailshell carbongall2:x:1003:1004::/home/carbongall2:/usr/local/cpanel/bin/jailshell etadvca2:x:1004:1005::/home/etadvca2:/usr/local/cpanel/bin/jailshell agmorlando:x:1005:1006::/home/agmorlando:/usr/local/cpanel/bin/jailshell acestaff:x:1006:1007::/home/acestaff:/usr/local/cpanel/bin/jailshell ariannab:x:1007:1008::/home/ariannab:/usr/local/cpanel/bin/jailshell bestmtd:x:1008:1009::/home/bestmtd:/usr/local/cpanel/bin/jailshell chblegal:x:1009:1010::/home/chblegal:/usr/local/cpanel/bin/jailshell garycarr:x:1010:1011::/home/garycarr:/usr/local/cpanel/bin/jailshell grandeos:x:1011:1012::/home/grandeos:/usr/local/cpanel/bin/jailshell hatstack:x:1012:1013::/home/hatstack:/usr/local/cpanel/bin/jailshell insiderunwaycom2:x:1013:1014::/home/insiderunwaycom2:/usr/local/cpanel/bin/jailshell iviewdriveca2:x:1014:1015::/home/iviewdriveca2:/usr/local/cpanel/bin/jailshell jimbeyer:x:1015:1016::/home/jimbeyer:/usr/local/cpanel/bin/jailshell kroynoscom2:x:1016:1017::/home/kroynoscom2:/usr/local/cpanel/bin/jailshell leesburg:x:1017:1018::/home/leesburg:/usr/local/cpanel/bin/jailshell logansit:x:1018:1019::/home/logansit:/usr/local/cpanel/bin/noshell rgcacom1:x:1019:1020::/home/rgcacom1:/usr/local/cpanel/bin/jailshell lybabaseball:x:1020:1021::/home/lybabaseball:/usr/local/cpanel/bin/jailshell rwgalca2:x:1021:1022::/home/rwgalca2:/usr/local/cpanel/bin/jailshell rwmnet4:x:1022:1023::/home/rwmnet4:/usr/local/cpanel/bin/jailshell savedbyzero2:x:1023:1024::/home/savedbyzero2:/usr/local/cpanel/bin/jailshell securemm:x:1024:1025::/home/securemm:/usr/local/cpanel/bin/jailshell shermanmc:x:1025:1026::/home/shermanmc:/usr/local/cpanel/bin/jailshell stoneand:x:1026:1027::/home/stoneand:/usr/local/cpanel/bin/jailshell sunstate:x:1028:1029::/home/sunstate:/usr/local/cpanel/bin/jailshell truckerssolution:x:1029:1030::/home/truckerssolution:/usr/local/cpanel/bin/jailshell westworldtelecom:x:1030:1031::/home/westworldtelecom:/usr/local/cpanel/bin/jailshell jandrdes:x:1031:1032::/home/jandrdes:/usr/local/cpanel/bin/noshell _imunify:x:973:970::/home/_imunify:/bin/false agent360:x:972:968::/home/agent360:/bin/false p1now:x:1033:1034::/home/p1now:/usr/local/cpanel/bin/noshell tcpdump:x:72:72::/:/sbin/nologin stagingpower1:x:1034:1035::/home/stagingpower1:/usr/local/cpanel/bin/noshell bmdstagingpower1:x:1035:1036::/home/bmdstagingpower1:/usr/local/cpanel/bin/noshell myhosteddomain:x:1036:1037::/home/myhosteddomain:/usr/local/cpanel/bin/noshell