Account [named] login shell has changed email after the latest update

JustSomeGuy

Active Member
Oct 13, 2007
30
0
56
WHM updated overnight and I ended up getting the following from LFD
Code:
Time: Thu Sep 26 23:16:57 2019 -0700

Reported Modifications:

Account [named] login shell has changed from [/bin/false] to [/sbin/nologin]
Is this normal? Did anyone else get this?
 

Jcats

Well-Known Member
PartnerNOC
May 25, 2011
807
158
168
New Jersey
cPanel Access Level
DataCenter Provider
Go to WHM > Manage Shell Access

Does the account have shell access? If not, it was most likely enabled at one point but its not enabled in the package so it was reverted.
 

Jcats

Well-Known Member
PartnerNOC
May 25, 2011
807
158
168
New Jersey
cPanel Access Level
DataCenter Provider
Example:

1569605044832.png

You might of clicked the 'Keep this account on its package (Not recommended)' previously.
 

Jcats

Well-Known Member
PartnerNOC
May 25, 2011
807
158
168
New Jersey
cPanel Access Level
DataCenter Provider
Oh, I thought named was just a placeholder for a cPanel user.

Well in that case, its good that took place since named is the user for your DNS server, this would possibly suggest that there could of been some kind of compromise on the server, possibly at the root level as that user shouldn't have shell access.