[1;36mLeaseweb Managed Hosting Hardening Script[0m
[1;33mVersion: 12[0m
[1;32mCentOS 9 Version[0m
[1;37mLogging in file /root/managed/harden-2026-05-12-20-24-26.log[0m
[1;36mCheck for duplicate almalinux.repo in AlmaLinux 9[0m
[1;37m+ Checking almalinux.repo ... [0m
[1;36mInstall Perl FindBin[0m
[1;37m+ Checking for FindBin ... [0m
[1;32minstalled[0m
[1;36mInstall Kernel Headers[0m
[1;37m+ Checking for kernel headers ... [0m
[1;32minstalled[0m
[1;36mInstall Kernel Devel[0m
[1;37m+ Checking for kernel devel ... [0m
[1;32minstalled[0m
[1;36mLeaseweb Support Key[0m
[1;37m+ Checking Leaseweb Support SSH Key ... [0m
[1;32mexists[0m
[1;36mPreliminary fixes[0m
[1;37m+ Import new MySQL GPG Key ... [0m
[1;32mdone[0m
[1;37m+ Fix sudoers line in /etc/nsswitch.conf ... [0m
[1;32mdone[0m
[1;36mChecking cPanel Status[0m
[1;37m+ Checking for cPanel ... [0m
[1;32minstalled[0m
[1;36mSet Shared IP[0m
[1;37m+ Setting to main IP if set to 127.0.0.1 ... [0m
[1;32mdone[0m
[1;36mChecking if Server is up-to-date[0m
[1;37m+ Checking if updated ... [0m
[1;32myes[0m
[1;36mAlmaLinux Installation[0m
[1;37m+ Checking for AlmaLinux ... [0m
[1;32minstalled[0m
[1;36mCheck for Acronis Agent[0m
[1;37m+ Checking for agent ... [0m
[1;32minstalled[0m
[1;36mcPanel Tweak Settings[0m
[1;37m+ Turning off Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak) ... [0m
---
metadata:
  command: set_tweaksetting
  reason: OK
  result: 1
  version: 1
[1;32mdone[0m
[1;37m+ Setting nightly Kernel Updates ... [0m
---
metadata:
  command: set_tweaksetting
  reason: OK
  result: 1
  version: 1
[1;32mdone[0m
[1;36mInstall IPSet[0m
[1;37m+ Checking for IPSet ... [0m
[1;32minstalled[0m
[1;36mCSF Firewall[0m
[1;37m+ Checking for CSF Firewall ... [0m
[1;32minstalled ... [0m
  csf.service                                                                                      loaded active exited    ConfigServer Firewall & Security - csf
[1;32mrunning[0m
[1;37m+ Installing cPanel CSF Updates ... [0m
Last metadata expiration check: 0:01:03 ago on Tue 12 May 2026 08:23:25 PM UTC.
Package cpanel-csf-16.18-1.1.1.cpanel.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[1;32mdone[0m
[1;36mPHP-FPM Pool Settings[0m
[1;37m+ Checking for system_pool_defaults.yaml ... [0m
[1;32mfound ... [0m
php_value_error_reporting: E_ALL & ~E_NOTICE & ~E_DEPRECATED
[1;32mcorrect[0m
[1;36mTune Apache Settings[0m
[1;37m+ Checking for jq ... [0m
[1;32minstalled[0m
[1;37m+ Checking for libonig ... [0m
[1;32mlinked[0m
[1;37m+ Tuning Apache ... [0m
[1;32mcorrect[0m
[1;36mModSecurity[0m
[1;37m+ Checking for ModSecurity ... [0m
[1;32minstalled[0m
[1;37m+ Checking Icinga Ignore Ruleset ... [0m
SecRule REMOTE_ADDR "@contains 108.62.0.214" "id:1,phase:1,nolog,allow,ctl:ruleEngine=Off"
[1;32minstalled[0m
[1;37m+ Checking OWASP3 Ruleset ... [0m
[1;32minstalled[0m
[1;36mInstall SMNP[0m
[1;37m+ Installing net-snmp net-snmp-util ... [0m
[1;32minstalled[0m
[1;37m+ Checking SNMP Configuration ... [0m
group   incremental usm         LWSNMPUser
rouser LWSNMPUser
[1;32minstalled[0m
[1;36mChecking Pure-FTP and TLS Encryption[0m
[1;37m+ Checking Pure-FTP ... [0m
Current FTP server type: pure-ftpd
[1;32menabled[0m
[1;37m+ Setting Passive Port Range to 49152 65534  ... [0m
PassivePortRange: 49152 65534
[1;32mexists[0m
[1;37m+ Set TLS Encryption Support ... [0m
TLS: 3
[1;32mexists[0m
[1;36mcPHulk Service[0m
[1;37m+ Checking status ... [0m
  is_enabled: 1
[1;32menabled[0m
[1;36mClamAV Service[0m
[1;37m+ Enabling ClamAV Plugin... [0m
---
data:
  log_entry: 2026-05-12T20:24:29Z_cpanel-clamav
  pid: 19942
metadata:
  command: install_rpm_plugin
  reason: OK
  result: 1
  version: 1
[1;32mdone[0m
[1;36mGreylisting Service[0m
[1;37m+ Checking greylisting ... [0m
[1;32mdisabled[0m
[1;36mcPanel Analytics[0m
[1;37m+ Disabling analytics ... [0m
---
metadata:
  command: participate_in_analytics
  reason: OK
  result: 1
  version: 1
[1;32mdone[0m
[1;36mContact Manager[0m
[1;37m+ Changing to high setting ... [0m
[1;32mdone[0m
[1;36mInstall elinks[0m
[1;37m+ Checking for elinks ... [0m
[1;32minstalled[0m
[1;36mSSH Config[0m
[1;37m+ Checking SSH ... [0m
Match Address 108.62.0.214
[1;32menabled[0m
[1;36mConsole Debugging[0m
[1;37m+ Setting console debugging ... [0m
[1;32mdone[0m
[1;36mAcronis Backup Plugin[0m
[1;37m+ Checking for Acronis Agent ... [0m
[1;32mfound[0m
[1;37m+ Checking for Acronis Backup Plugin ... [0m
[1;32minstalled[0m
[1;36mImunifyAV Install[0m
[1;37m+ Checking for ImunifyAV ... [0m
[1;32minstalled[0m
[1;36mPost Install Cleanup[0m
[1;37m+ Checking postinstall script ...[0m
[1;32mnot present[0m
[1;37m+ Removing temp dir ... [0m
[1;32mdone[0m
[1;32m
* Hardening complete[0m