We are getting chattr process in cpanel.

Please note that, with very few exceptions, files on a cPanel server should not have attributes such as i (immutable) or a (append-only) set.

Using chatter to set the i and a attributes on files that cPanel uses or manages will cause problems. It will prevent cPanel from properly updating or configuring services. If cPanel is reverting custom changes to a file, such as the Exim or Apache configuration, using chattr +i is not the proper way to prevent that type of behavior. Instead, tools are provided in cPanel to make custom changes to services' configurations without the use of chattr.

I can go into more detail if anyone wants information about making changes to specific services that will be preserved when cPanel updates, but I wanted to mention that cPanel does not use the i and a attributes and these should not be set on a cPanel server.

(The lone exception I can think of is a single file, fpexe, that is part of FrontPage extensions. That is one of the only files related to cPanel in any way that normally should have the i attribute applied.)

 

To get more details on the process when it runs beyond what has been noted, you can run the following commands to get details:

Code:

ps aux | grep chattr
lsof -p PID#
xargs -n 1 -0 < /proc/PID#/environ

In the above, you would run the ps aux to find out the PID number for the process, then replace PID# in the next two commands with the PID number of that process. The lsof will show what files the process has opened, while the environment (/proc/PID#/environ) of the process will show what it is running. These are two major ways to determine what is going on for a set process.