Account [named] login shell has changed email after the latest update

[JustSomeGuy]

WHM updated overnight and I ended up getting the following from LFD

Time: Thu Sep 26 23:16:57 2019 -0700

Reported Modifications:

Account [named] login shell has changed from [/bin/false] to [/sbin/nologin]

Is this normal? Did anyone else get this?

 

[Jcats]

Go to WHM > Manage Shell Access

Does the account have shell access? If not, it was most likely enabled at one point but its not enabled in the package so it was reverted.

 

[Jcats]

Example:



You might of clicked the 'Keep this account on its package (Not recommended)' previously.

 

[JustSomeGuy]

"named" is not even listed there

 

[Jcats]

Oh, I thought named was just a placeholder for a cPanel user.

Well in that case, its good that took place since named is the user for your DNS server, this would possibly suggest that there could of been some kind of compromise on the server, possibly at the root level as that user shouldn't have shell access.

 

[cPanelLauren]

Hi @JustSomeGuy

This occurs sometimes during updates, on the date this began are there corresponding yum update logs?