yakatz9

Well-Known Member
Mar 16, 2010
51
1
58
cPanel Access Level
DataCenter Provider
I was trying out the Security Advisor and it told me to rerun EasyApache.
EasyApache errored (passenger needs an update for Apache 2.4) and prompted me to create a support ticket.

I gave cPanel support access to my server with an SSH key (since deauthorized) and I know they logged in because lfd sent me an email notification, but when I go to the bash history, there is nothing there that they did.

Is it cPanel policy to not leave history? Does anyone else have experience with this?

(I have since told bash not to ignore lines that start with a space char)
 

Brian

Well-Known Member
Dec 1, 2010
117
2
68
Texas
cPanel Access Level
Root Administrator
Howdy,

cPanel's ticket system uses a proprietary authentication system. Among other behaviors, it leaves per-ticket bash history on the system. You should see the bash history at a location such as (for your ticket):

/root/.bash_history.cpanel_ticket.4364189

This allows you to readily see exactly what was done by staff for a given ticket versus having to sort through your server's entire bash history.