Notification mail from LFD

[jestin_virtual]

Hello ,

I didn`t update my Cpanel/OS but i received the email 2 times ( Yesterday & Today )

it might be because a hack issue ?


---------------------
Time: Wed Nov 4 01:00:04 2009 +0330

The following list of files have FAILED the md5sum comparison test. This means that the file has been changed in some way. This could be a result of an OS update or application upgrade. If the change is unexpected it should be investigated:

/usr/sbin/lvchange: FAILED
/usr/sbin/lvconvert: FAILED
/usr/sbin/lvcreate: FAILED
/usr/sbin/lvdisplay: FAILED
/usr/sbin/lvextend: FAILED
/usr/sbin/lvm: FAILED
/usr/sbin/lvmchange: FAILED
/usr/sbin/lvmdiskscan: FAILED
/usr/sbin/lvmsadc: FAILED
/usr/sbin/lvmsar: FAILED
/usr/sbin/lvreduce: FAILED
/usr/sbin/lvremove: FAILED
/usr/sbin/lvrename: FAILED
/usr/sbin/lvresize: FAILED
/usr/sbin/lvs: FAILED
/usr/sbin/lvscan: FAILED
/usr/sbin/pvchange: FAILED
/usr/sbin/pvck: FAILED
/usr/sbin/pvcreate: FAILED
/usr/sbin/pvdisplay: FAILED
/usr/sbin/pvmove: FAILED
/usr/sbin/pvremove: FAILED
/usr/sbin/pvresize: FAILED
/usr/sbin/pvs: FAILED
/usr/sbin/pvscan: FAILED
/usr/sbin/vgcfgbackup: FAILED
/usr/sbin/vgcfgrestore: FAILED
/usr/sbin/vgchange: FAILED
/usr/sbin/vgck: FAILED
/usr/sbin/vgconvert: FAILED
/usr/sbin/vgcreate: FAILED
/usr/sbin/vgdisplay: FAILED
/usr/sbin/vgexport: FAILED
/usr/sbin/vgextend: FAILED
/usr/sbin/vgimport: FAILED
/usr/sbin/vgmerge: FAILED
/usr/sbin/vgmknodes: FAILED
/usr/sbin/vgreduce: FAILED
/usr/sbin/vgremove: FAILED
/usr/sbin/vgrename: FAILED
/usr/sbin/vgs: FAILED
/usr/sbin/vgscan: FAILED
/usr/sbin/vgsplit: FAILED
/sbin/ip6tables: FAILED
/sbin/ip6tables-restore: FAILED
/sbin/ip6tables-save: FAILED
/sbin/iptables: FAILED
/sbin/iptables-restore: FAILED
/sbin/iptables-save: FAILED
/sbin/lvm: FAILED
/sbin/lvm.static: FAILED
/sbin/pvscan: FAILED
/sbin/vgchange: FAILED
/sbin/vgscan: FAILED

[Infopro]

You might take a look at the ConfigServer forums for help with this. You may not have updated, but your settings for updates might have security updates enabled/auto, and if so that could be the reason for this message. Once you've figured it out be sure to restart LFD/CSF

[yayyo]

@Infopro : Yes, generally speaking this might look like a Configserver lfd issue, but in this case I hope you agree that it is closely related to cPanel cron jobs, and that a brief explanation here might help others.

@jestin_virtual Don't Worry (be happy )

Those files were updated automatically by the cPanel upcp cron job. Depending on your root email forwarding config, you should also have received an email from your server before the lfd ones, subject: "Cron <root@yourdomain> /scripts/upcp".

From that you can see that three packages were updated

---> Package iptables.i386 0:1.3.5-5.3.el5_4.1 set to be updated
---> Package iptables-ipv6.i386 0:1.3.5-5.3.el5_4.1 set to be updated
---> Package lvm2.i386 0:2.02.46-8.el5_4.2 set to be updated

The reason that you get two emails from lfd is that a few hours later, cPanel runs another cron job which prelinks the new binaries.

I hope that helps.

[jestin_virtual]

@Infopro : Yes, generally speaking this might look like a Configserver lfd issue, but in this case I hope you agree that it is closely related to cPanel cron jobs, and that a brief explanation here might help others.

@jestin_virtual Don't Worry (be happy )

Those files were updated automatically by the cPanel upcp cron job. Depending on your root email forwarding config, you should also have received an email from your server before the lfd ones, subject: "Cron <root@yourdomain> /scripts/upcp".

From that you can see that three packages were updated

The reason that you get two emails from lfd is that a few hours later, cPanel runs another cron job which prelinks the new binaries.

I hope that helps.

=========================
Hello , Thank you for your reply ,