Na}{

Path: ~//scripts/

File Content: `maintenance`

#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/maintenance                     Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

package scripts::maintenance;

use strict;
use warnings;

use Try::Tiny;

use Cpanel::iContact::Class::Update::EndOfLife     ();
use Cpanel::AccessIds                              ();
use Cpanel::Binaries                               ();
use Cpanel::TimeHiRes                              ();
use Cpanel::Config::LoadCpConf                     ();
use Cpanel::ConfigFiles                            ();
use Cpanel::Cron::Utils                            ();
use Cpanel::Crypt::GPG::Settings                   ();
use Cpanel::Crypt::GPG::VendorKeys::TimestampCache ();
use Cpanel::Env                                    ();
use Cpanel::IOCallbackWriteLine                    ();
use Cpanel::MysqlUtils::Version                    ();
use Cpanel::Notify                                 ();
use Cpanel::OS                                     ();
use Cpanel::Rand::Get                              ();
use Cpanel::RPM::Versions::Directory               ();
use Cpanel::SafeRun::Object                        ();
use Cpanel::SafeRun::BG                            ();
use Cpanel::Server::Type                           ();
use Cpanel::ServerTasks                            ();
use Cpanel::Services::Enabled                      ();
use Cpanel::Sync::CheckRestore                     ();
use Cpanel::Update::Config                         ();
use Cpanel::Config::Crontab                        ();
use Cpanel::Update::Logger                         ();
use IO::Handle                                     ();
use IO::Select                                     ();

# hash we'll use to process each request
our $RPM_IS_BROKEN             = 0;
our $_UPGRADE_IN_PROGRESS_FILE = '/usr/local/cpanel/upgrade_in_progress.txt';
my $DRY_RUN;

our $SQLITE_AUTO_REBUILD_LAST_RAN_FILE = '/var/cpanel/.last_ran_sqlite_auto_rebuild_from_maintenance';

# Internal documentation: https://cpanel.wiki/x/zwwFAw
sub script {
    my ( $class, @args ) = @_;

    if ( $> != 0 ) {
        print "This cPanel maintenance script must be run as root, not uid $>.\n";
        return 2;
    }

    umask(0022);
    my $security_token = $ENV{'cp_security_token'} || '';

    # default pcent when none are defined
    my $starting_pbar  = 0;
    my $finishing_pbar = 100;

    # in case we are called before and outside of upcp
    setupenv();

    my $only_run;

    # create a default logfile path, if called from upcp, use the log it passes
    my $now          = time();
    my $logfile_path = '/var/cpanel/updatelogs/maintenance' . $now . '.log';

    my $custom_pbar;

    foreach my $arg (@args) {
        if ( $arg =~ m/^--log\=(.*)/ ) {
            $logfile_path = $1;
        }
        elsif ( $arg =~ m/^--pbar-start=([0-9]+)/ ) {
            $custom_pbar   = 1;
            $starting_pbar = int($1);
        }
        elsif ( $arg =~ m/^--pbar-stop=([0-9]+)/ ) {
            $custom_pbar    = 1;
            $finishing_pbar = int($1);
        }
        elsif ( $arg =~ m/^--dry-run$/ ) {    # no doc required: dev only
            $DRY_RUN = 1;
        }
        elsif ( $arg =~ m/^--pre$/ ) {        # no doc required: upcp only
            $only_run = 'pre';
        }
        elsif ( $arg =~ m/^--post$/ ) {       # no doc required: upcp only
            $only_run = 'post';
        }
        elsif ( $arg =~ m/^--help/ ) {
            return usage();
        }
    }

    open( STDERR, ">&STDOUT" );
    $| = 1;

    # when start pbar is unset progress bar is not displayed
    setup_logger( $logfile_path, $custom_pbar ? $starting_pbar : undef );

    # helper which normalize all percentage to be in [ $starting_pbar .. $finishing_pbar ]
    #    the only thing that we should care are the capping values which should be between [ 0..100 ]
    my $increment_pbar;    # initialize later as we can count how many tasks to run

    my $do_progress_bar = sub {
        my (@args) = @_;
        return bless sub { $increment_pbar->(@args) }, 'PBAR';
    };

    #############################################################################
    # maintenance actions are split in 2 groups: pre and post
    # by default maintenance is going to run both groups: pre than post
    # /scripts/maintenance is similar to run
    #   1. ~maintenance --pre
    #   2. ~maintenance --post
    # but we can now run only one of these groups, this allow to run post_sync_cleanup earlier during upcp
    # /scripts/upcp is going to use maintenance script using 2 different calls
    #   1. update.now
    #   2. maintenance --pre
    #   3. post_sync_cleanup
    #   4. maintenance --post

    my $blocks = { pre => [], post => [] };

    # This is the only pre block in this script. Only things that MUST happen before post_sync_cleanup should live here.
    push @{ $blocks->{'pre'} }, (
        show_status('Assuring needed symlinks in 3rdparty/bin are in place.'),
        '/usr/local/cpanel/scripts/link_3rdparty_binaries',

        show_status('Setting clock'),
        '/usr/local/cpanel/scripts/rdate',

        # Process any possibly pending PHP PEAR updates from cpanel-php pear RPMs in the background,
        # as they should have already been installed during update.now
        action_update_pear_registry_in_the_background(),

        action_set_up_dns_resolver_workarounds(),
        action_background_refresh_dkim_validity_cache(),

        action_find_and_fix_rpm_issues(),    # set RPM_IS_BROKEN (at run time): used by sysup and check_cpanel_pkgs
        action_install_els(),
        action_update_packages(),
        action_ensure_mysql_upgrade_hook(),

    );

    push @{ $blocks->{'post'} }, (

        show_status('Purging cpupdate.conf of invalid entries'),
        \&purge_cpupdate_conf,
        \&purge_upcp_logs,

        action_updatesigningkey(),
        action_sysup(),

        #We do it right after post sync cleanup and sysup
        #to ensure cPanel services have been restarted before we
        #do any system ones so that they can access cPanel
        #and monitor the system while the system services are
        #being restarted.
        show_status('Restarting any outdated services'),
        $ENV{'CPANEL_BASE_INSTALL'} ? () : ( run( '/usr/local/cpanel/scripts/find_outdated_services --auto', { exit_ok => [1] } ) ),    # Base install does this in the background before upcp

        action_vps_optimizer(),                                                                                                         # not on dnsonly
        show_status('Checking for a valid C Compiler.'),
        '/usr/local/cpanel/scripts/checkccompiler',
        action_build_locale_databases(),
        show_status('Migrating feature lists to current version (if needed)'),
        '/usr/local/cpanel/bin/migrate_all_feature_lists_to_current',

        show_status('Checking for main IP changes'),
        '/usr/local/cpanel/scripts/mainipcheck',

        show_status('Updating neighbor netblocks'),
        '/usr/local/cpanel/scripts/update_neighbor_netblocks',

        show_status('Updating known proxy ips'),
        '/usr/local/cpanel/scripts/update_known_proxy_ips',

        show_status('Validating server hostname'),

        # No need to check this on a fresh install since we already validate in the installer
        ( $ENV{'CPANEL_BASE_INSTALL'} ? () : ('/usr/local/cpanel/scripts/check_valid_server_hostname --notify') ),

        show_status('Validating cPanel system users'),
        '/usr/local/cpanel/scripts/checkusers',
        action_fixrndc(),
        action_init_wwwacct_conf(),
        action_ipaliases(),
        action_check_cpanel_pkgs(),
        show_status('Running env auto repair'),
        '/usr/local/cpanel/scripts/vzzo-fixer',
        '/usr/local/cpanel/scripts/quota_auto_fix',
        '/usr/local/cpanel/scripts/clear_orphaned_virtfs_mounts --inactiveonly',
        '/usr/local/cpanel/scripts/disable_prelink',
        show_status('Cleaning up orphaned filesystem quotas'),
        '/usr/local/cpanel/scripts/cleanquotas',
        ( $ENV{'CPANEL_BASE_INSTALL'} ? () : ('/usr/local/cpanel/scripts/autorepair autorepair') ),
        '/usr/local/cpanel/scripts/purge_old_config_caches',
        '/usr/local/cpanel/scripts/cleansessions',
        '/usr/local/cpanel/scripts/checkbashshell',
        action_passwd(),
        \&setupcrontab,
        '/usr/local/cpanel/scripts/dnsqueuecron',
        show_status('Rebuild WHM chrome cache'),
        '/usr/local/cpanel/scripts/rebuild_whm_chrome',

        # checkallsslcerts needs to run on DNSONLY
        # because we need an ssl cert for dovecot for it to startup

        # Ensure /var/cpanel/ssl/*-SIGNATURE_CHAIN_VERIFIED and
        #  /var/cpanel/ssl/*-NO_AFTER is updated so Cpanel::Redirect
        #  can make good descisions.  This also ensures that
        #  admins get timely notice of the expire time being
        #  reached on their ssl certificates.
        action_checkallsslcerts(),

        show_status('Purging invalid or soon-to-expire Domain TLS entries for service domains'),
        '/usr/local/cpanel/scripts/check_domain_tls_service_domains.pl --prune',

        show_status('Cleaning up temporary wheel/sudo users'),
        '/usr/local/cpanel/scripts/clean_up_temp_wheel_users',
    );

    if ( !Cpanel::Server::Type::is_dnsonly() ) {
        push @{ $blocks->{'post'} }, (
            action_sprite_generator(),
            action_update_rdns_ips_cache(),
            show_status('Updating services and databases'),
            '/usr/local/cpanel/scripts/listcheck',
            action_purge_modsec(),
            ( $ENV{'CPANEL_BASE_INSTALL'} ? () : ( action_ftpquotacheck() ) ),
            '/usr/local/cpanel/scripts/updateuserdomains',

            '/usr/local/cpanel/bin/empty_user_trash --quiet --all',
            '/usr/local/cpanel/bin/empty_user_horde_temp_files --quiet --all',
            '/usr/local/cpanel/scripts/build_maxemails_config',
            '/usr/local/cpanel/scripts/updateuserdatacache --force',

            show_status('Checking system maxmem setting'),
            '/usr/local/cpanel/scripts/check_maxmem_against_domains_count --always-fix',

            show_status('Running various cleanup scripts'),
            '/usr/local/cpanel/scripts/resetmailmanurls',
            show_status('Checking MySQL to ensure we can connect'),
            (    # Base install does this in the background before upcp
                $ENV{'CPANEL_BASE_INSTALL'} ? () : (
                    '/usr/local/cpanel/scripts/mysqlconnectioncheck'    # POST or leave it there ??
                                                                        # We must update the rules before we compile them
                )
            ),
            action_update_spamassassin_rules(),
            show_status('Checking PostgreSQL to ensure we can connect'),
            '/usr/local/cpanel/bin/postgrescheck --check-auth --reset-pass-on-fail',    # POST or leave it there ??
            action_repair_mailman(),
            action_repair_mysql(),
            show_status('Running sanity checks and notifications'),                     # status update
            '/usr/local/cpanel/scripts/chkpaths',
            '/usr/local/cpanel/scripts/hackcheck',
            '/usr/local/cpanel/scripts/oopscheck',
            '/usr/local/cpanel/scripts/fixetchosts',
            '/usr/local/cpanel/scripts/check_unreliable_resolvers --notify',
            '/usr/local/cpanel/bin/is_script_stuck --script=autossl_check --time=3h --kill --notify=root',
            ( $ENV{'CPANEL_BASE_INSTALL'} ? () : ('/usr/local/cpanel/scripts/quotacheck') ),
            '/usr/local/cpanel/scripts/email_archive_maintenance',
            '/usr/local/cpanel/scripts/email_hold_maintenance',
            '/usr/local/cpanel/scripts/expunge_expired_certificates_from_sslstorage',
            '/usr/local/cpanel/scripts/notify_expiring_certificates',
            '/usr/local/cpanel/scripts/notify_expiring_certificates_on_linked_nodes',
            '/usr/local/cpanel/scripts/expunge_expired_transfer_sessions',
            '/usr/local/cpanel/scripts/expunge_expired_pkgacct_sessions',
            '/usr/local/cpanel/scripts/smartcheck',
            '/usr/local/cpanel/scripts/compilerscheck',
            '/usr/local/cpanel/scripts/check_mount_procfs',
            sqlite_auto_rebuild_if_needed(),
            '/usr/local/cpanel/scripts/setup_modsec_db',
            '/usr/local/cpanel/scripts/modsec_vendor update --auto',
            '/usr/local/cpanel/bin/check_cpstore_in_sync_with_local_storage',

            action_purge_dead_comet_files(),
            action_update_freshclam(),

            show_status('Restoring compiler permissions'),
            '/usr/local/cpanel/scripts/compilers restore',

            show_status('Cleaning up mailbox trash'),
            '/usr/local/cpanel/scripts/dovecot_maintenance --background',

            show_status('Checking MySQL Version'),
            sub { check_mysql_version() },

            show_status('Cleaning up root datastores and caches'),
            '/usr/local/cpanel/bin/clean-datastores --background root',
        );

    }    # end !dnsonly

    push @{ $blocks->{'post'} }, (
        action_buildexim(),
        action_eximstats(),
        action_exim_purge_old_tracker_files(),
        sub { Cpanel::Sync::CheckRestore::check_and_restore("img-sys/powered_by_cpanel.svg") },
        action_cleanup_signature(),
        action_enable_onboot_handler(),
    );

    if ( !Cpanel::Server::Type::is_dnsonly() ) {    # not dnsonly

        push @{ $blocks->{'post'} }, (
            (
                $ENV{'CPANEL_BASE_INSTALL'} ? () : (
                    show_status('Cleaning SpamAssassin DBM files'),
                    '/usr/local/cpanel/scripts/spamassassin_dbm_cleaner'
                )
            ),
            show_status('Cleaning Roundcube attachment directory'),
            \&clean_roundcube_attachment_directory,

            (
                # This was causing an OOM on fresh install on the
                # $5/mo DO instance
                # There will be no one to notify on a fresh install
                # and this will run a few hours after the install
                # anyways
                $ENV{'CPANEL_BASE_INSTALL'} ? () : (
                    show_status('Checking for new security advice'),
                    '/usr/local/cpanel/scripts/check_security_advice_changes --notify --background',
                )
            ),

            show_status('Running former postinstall scripts'),
            '/usr/local/cpanel/bin/dcpumon --killproc',
            '/usr/local/cpanel/bin/setupdbmap',
            '/usr/local/cpanel/bin/fix_userdata_perms',
            '/usr/local/cpanel/scripts/detect_env_capabilities',
            (    # Base install does this in the background before upcp
                $ENV{'CPANEL_BASE_INSTALL'} ? () : (
                    show_status('Updating cPGreyList Common Mail Providers'),
                    '/usr/local/cpanel/scripts/manage_greylisting --init --update_common_mail_providers'
                )
            ),

            show_status('Checking for deprecated PHP local.ini'),
            '/usr/local/cpanel/scripts/migrate_local_ini_to_php_ini --run --verbose',

            show_status('Ensuring an "Active" MySQL profile is set'),
            \&ensure_active_mysql_profile_is_present,
            run( '/usr/local/cpanel/scripts/check_mysql', { 'exit_ok' => [ 2, 255 ] } ),
            action_cloudlinux_update(),

            show_status('Updating plugins data cache'),
            '/usr/local/cpanel/bin/refresh_plugin_cache',

            show_status('Ensuring SSL certificate information for CCS is up to date.'),
            '/usr/local/cpanel/scripts/ccs-check --run --ssl',

            show_status('Ensure cpanel-plugins yum repo exists'),
            \&_create_cpanel_plugins_repo,

            show_status('Checking Addon Licenses'),
            check_addon_licenses(),

            show_status('Updating Public Suffix List'),
            update_public_suffix_list(),

            show_status('Ensure required cpanel-plugins are installed and updated.'),
            \&_install_or_upgrade_plugin_packages,
        );

    }

    push @{ $blocks->{'post'} }, (
        show_status('Checking End Of Life for current version.'),
        \&check_end_of_life,
    );

    my $maintenance_complete = Cpanel::Server::Type::is_dnsonly() ? q{DNSONLY maintenance complete.} : q{Maintenance complete.};

    # build the todo list depending which block we want to run
    #   default = pre + post

    my @todo = ( @{ $blocks->{'pre'} }, @{ $blocks->{'post'} } );    # Remove the todo once done
    if ( $only_run && ref $blocks->{$only_run} ) {
        @todo = @{ $blocks->{$only_run} };
        $maintenance_complete .= " [state=$only_run]";
    }

    # we have now reach 100%, move the progress bar
    push @todo, (
        $do_progress_bar->( complete => 1 ),
        show_status("\n\n$maintenance_complete\n"),
    );

    # how many actions do we have to run which are neither a status nor a pbar item
    my $total_actions = grep { my $ref = ref $_; $ref ne 'PBAR' && $ref !~ /Action::(?:Status|Command)/ } @todo;

    # initialize progress bar with: from % to % and number of elements
    $increment_pbar = increment_pbar( $starting_pbar, $finishing_pbar, $total_actions );

    run_actions( \@todo, $increment_pbar );

    return logger()->get_need_notify() ? 1 : 0;
}

sub check_end_of_life {    # EOL

    # Send a notification if this version is nearing end of life
    local $@;
    eval {
        open my $mainip_fh, '<', '/var/cpanel/mainip' or die "Can't open < /var/cpanel/mainip: $!";
        my $ip = <$mainip_fh>;
        close $mainip_fh;
        chomp $ip;

        my $icontact_class = 'Update::EndOfLife';
        Cpanel::Notify::notification_class(
            constructor_args => [ origin => 'upcp', source_ip_address => $ip ],
            map { $_ => $icontact_class } qw(class application),
        );
        1;
    } or logger()->warning("Error while checking end of life: $@");

    return;
}

sub sqlite_auto_rebuild_if_needed {
    return if !_is_saturday_or_sunday();

    #If the touch file is newer than the current time
    #we assume the system had a clock issue and run.
    my $now      = time();
    my $last_ran = ( stat $SQLITE_AUTO_REBUILD_LAST_RAN_FILE )[9] || 0;
    return if $last_ran < $now && $now < ( $last_ran + ( 5 * 86400 ) );

    do { open( my $fh, '>', $SQLITE_AUTO_REBUILD_LAST_RAN_FILE ) or warn "open($SQLITE_AUTO_REBUILD_LAST_RAN_FILE): $!" };

    #This gets a longer timeout because on heavily populated
    #servers it can take over an hour to finish.
    return run(
        '/usr/local/cpanel/scripts/perform_sqlite_auto_rebuild_db_maintenance',
        {
            timeout => 10000,
        },
    );
}

#mocked in tests
sub _is_saturday_or_sunday {

    #Only run on Saturday or Sunday
    my $wday = (localtime)[6];
    return ( ( $wday == 0 ) || ( $wday == 6 ) );
}

our %touch_file_mock;    # Used to fake if touch files are present.

sub touch_file_exists {
    my ($file) = @_;
    $file or return;

    # Provide an easy way to mock file existance.
    return $touch_file_mock{$file} if exists $touch_file_mock{$file};

    return -e $file;
}

sub file_is_executable {
    my $file = shift;

    # for now use the same mock hash
    return $touch_file_mock{$file} if exists $touch_file_mock{$file};
    return -x $file;
}

sub populated_touch_file_exists {
    my ($file) = @_;
    $file or return;

    # Provide an easy way to mock file existance.
    return $touch_file_mock{$file} if exists $touch_file_mock{$file};

    return -e $file && !-z _;
}

################################################################
####[ Subroutines ]#############################################
################################################################

sub run_action {    # avoid to use array ref when using it from a single action
    my (@todo) = @_;
    return run_actions( \@todo );
}

sub run_actions {
    my ( $todo, $increment_pbar ) = @_;
    die unless ref $todo;
    foreach my $cmd (@$todo) {
        my $start_time = Cpanel::TimeHiRes::time();
        my $type       = ref $cmd;
        my $action     = {};

        if ( $type eq 'Action::Command' ) {
            $action = {%$cmd};
            $cmd    = $action->{'cmd'};
        }
        elsif ( $type eq 'Action::Status' ) {
            $action = { status => $cmd->[0] };
            $cmd    = undef;
        }
        elsif ($type) {
            if ( $type eq 'CODE' ) {
                if ($DRY_RUN) {
                    print "[dry-run mode] CodeRef\n";
                }
                else {
                    # custom cases with some extra code around the action
                    #   let them do what they want
                    local $@;

                    # Ensure that we do not allow a single action to
                    # cause the entire script to fail.
                    eval { $cmd->(); };
                    warn if $@;
                }
                $increment_pbar->() if ref $increment_pbar;
                my $runtime = sprintf( "%0.3f", Cpanel::TimeHiRes::time() - $start_time );
                logger()->info(" - Finished in $runtime seconds");
            }
            elsif ( $type eq 'PBAR' ) {
                $cmd->();
            }

            next;
        }
        $action->{cmd} = [ split( /\s+/, $cmd ) ] if $cmd;
        process($action);
        my $runtime = sprintf( "%0.3f", Cpanel::TimeHiRes::time() - $start_time );
        logger()->info(" - Finished command `$cmd` in $runtime seconds") if $cmd;
        $increment_pbar->()                                              if ref $increment_pbar;
    }

    return;
}

sub show_status {
    my $msg = shift;
    return unless defined $msg or length $msg;

    my $status = [$msg];
    bless $status, 'Action::Status';

    return $status;
}

sub run {
    my ( $cmd, $options ) = @_;

    my $status = { %$options, cmd => $cmd };
    bless $status, 'Action::Command';

    return $status;
}

sub process {
    my ($action) = @_;

    $action->{'status'} = '' if !defined $action->{'status'};
    if ( length( $action->{'status'} ) ) {
        logger()->info("Processing: $action->{'status'}");
        return;
    }

    my @cmd = @{ $action->{'cmd'} };

    if ($DRY_RUN) {
        print "[dry-run mode] " . join( ' ', @cmd, "\n" );
        return;
    }
    logger()->info(" - Processing command `@cmd`");

    my ( $program, @args ) = @cmd;

    my $logger = logger();
    my $run    = eval {
        Cpanel::SafeRun::Object->new(
            'program' => $program,
            'args'    => \@args,
            'stdout'  => Cpanel::IOCallbackWriteLine->new(
                sub {
                    $logger->info("   [$program] $_[0]");
                }
            )
        );
    };

    $? = -1;    ## no critic qw(Variables::RequireLocalizedPunctuationVars) -- needed for compat
    if ($@) {
        logger()->error( "   [$program] $@", 1 );
        logger()->set_need_notify();
        return;
    }

    $? = $run->CHILD_ERROR();    ## no critic qw(Variables::RequireLocalizedPunctuationVars) -- needed for compat
    if ( my $exit = $run->CHILD_ERROR() ) {
        $exit >>= 8;
        return if $exit && $action->{'exit_ok'} && grep { $exit == $_ } @{ $action->{'exit_ok'} };
        if ( my $stderr = $run->stderr() ) {
            foreach my $line ( split( m{\n}, $stderr ) ) {
                logger()->error( "   [$program] " . $line );
            }
        }
        logger()->error( "   [$program] " . $run->autopsy(), 1 );
        logger()->set_need_notify();
        return;
    }

}

# list of actions which need some extra logic or being postponed

sub action_vps_optimizer {
    return if Cpanel::Server::Type::is_dnsonly();    # idea move this check to the script itself
    return (
        show_status('Running platform specific optimizations'),
        '/usr/local/cpanel/scripts/vps_optimizer'
    );
}

sub action_update_spamassassin_rules {
    return if $ENV{'CPANEL_BASE_INSTALL'};
    return unless Cpanel::Update::Config::is_permitted( 'SARULESUP', get_update_conf() );
    return sub {
        return run_action(
            show_status('Updating Apache SpamAssassin™ rules'),
            background_update_spamassassin_rules(),
        );
    };

}

sub action_update_rdns_ips_cache {
    return sub {
        return run_action(
            show_status('Updating Reverse DNS Cache'),
            background_update_rdns_ips_cache(),
        );
    };

}

sub background_update_rdns_ips_cache {
    return sub {
        warn if !eval { Cpanel::ServerTasks::queue_task( ['DNSTasks'], "update_reverse_dns_cache" );    1; };
        warn if !eval { Cpanel::ServerTasks::schedule_task( ['CpDBTasks'], 600, "update_userdomains" ); 1; };
    };
}

sub background_update_spamassassin_rules {
    return sub {
        warn if !eval { Cpanel::ServerTasks::queue_task( ['SpamassassinTasks'], 'update_spamassassin_rules' ); 1 };
    };
}

sub background_sprite_generator {
    return sub {
        eval { Cpanel::ServerTasks::queue_task( ['SpriteTasks'], 'sprite_generator' ); };
    };
}

sub action_set_up_dns_resolver_workarounds {
    return sub {
        return run_action(
            show_status('Setting up resolver workarounds'),
            background_set_up_dns_resolver_workarounds(),
        );
    };

}

sub background_set_up_dns_resolver_workarounds {
    return sub {
        warn if !eval { Cpanel::ServerTasks::queue_task( ['DNSTasks'], "set_up_dns_resolver_workarounds" ); 1; };
    };
}

sub action_sprite_generator {
    return sub {
        return run_action(
            show_status('Rebuilding sprites'),
            background_sprite_generator(),
        );
    };
}

sub background_freshclam {
    return sub {
        eval { Cpanel::ServerTasks::queue_task( ['ClamTasks'], 'freshclam --quiet -l /var/log/clam-update.log' ); };
    };
}

sub action_background_refresh_dkim_validity_cache {
    return sub {
        eval { Cpanel::ServerTasks::queue_task( ['DKIMTasks'], 'refresh_entire_dkim_validity_cache' ); };
    };
}

sub action_update_freshclam {
    return sub {    # postpone the check if the binary is restored by RPM transaction
        my $freshclam_bin = Cpanel::Binaries::path('freshclam');
        return unless file_is_executable($freshclam_bin);

        return run_action(
            show_status('Updating virus patterns'),
            background_freshclam(),
        );
    }
}

sub action_purge_dead_comet_files {
    return (
        show_status('Purging old comet files'),
        '/usr/local/cpanel/bin/purge_dead_comet_files --quiet',
    );
}

sub action_update_packages {
    return sub {    # need RPM_IS_BROKEN to be set
        return unless Cpanel::Update::Config::is_permitted( 'RPMUP', get_update_conf() );
        return if $RPM_IS_BROKEN;

        return run_action(
            show_status('Running update-packages'),
            '/usr/local/cpanel/scripts/update-packages'
        );
    };
}

sub action_ensure_mysql_upgrade_hook {
    return sub {

        require Cpanel::MariaDB;

        my $config = scalar Cpanel::Config::LoadCpConf::loadcpconf();

        my $set_version = $config->{'mysql-version'};
        return if $set_version < 5.7;

        if ( Cpanel::MariaDB::version_is_mariadb($set_version) ) {
            require Cpanel::MariaDB::Install;

            my $mysql_install_obj = Cpanel::MariaDB::Install->new( 'output_obj' => logger() );
            $mysql_install_obj->install_upgrade_hook();
            return 1;
        }

        require Cpanel::Mysql::Install;

        my $mysql_install_obj = Cpanel::Mysql::Install->new( 'output_obj' => logger() );
        $mysql_install_obj->install_upgrade_hook();
        return 1;
    }
}

sub action_update_pear_registry_in_the_background {
    return sub {
        return Cpanel::SafeRun::BG::nooutputsystembg('/usr/local/cpanel/scripts/process_pending_cpanel_php_pear_registration');
    };
}

sub _create_cpanel_plugins_repo {
    warn if !eval {
        require Cpanel::Plugins::Repo;
        Cpanel::Plugins::Repo::install();
        1;
    };
    return;
}

sub _install_or_upgrade_plugin_packages {

    my @plugin_pkgs = ( 'cpanel-koality-plugin', 'cpanel-sitejet-plugin' );
    logger()->info("Checking for required cPanel & WHM plugins to install...");
    require Cpanel::Plugins;
    for my $pkg (@plugin_pkgs) {
        next if Cpanel::Plugins::is_plugin_installed($pkg);
        logger()->info("Installing the cPanel & WHM plugin $pkg.");
        eval { Cpanel::Plugins::install_plugins($pkg); };
        logger()->info($@) if $@;
    }

    return;
}

sub action_sysup {
    return if $ENV{'CPANEL_BASE_INSTALL'};    # This will already have been run on initial install
    return sub {                              # need RPM_IS_BROKEN to be set
        if ($RPM_IS_BROKEN) {
            logger()->error('RPM is not functioning. Skipping sysup.');
            return;
        }

        return run_action(
            show_status('Updating system packages: sysup'),
            '/usr/local/cpanel/scripts/sysup'
        );
    };
}

sub _find_and_fix_rpm_issue_script {    # for testing purpose
    return '/usr/local/cpanel/scripts/find_and_fix_rpm_issues';
}

sub background_install_els {
    return sub {
        Cpanel::ServerTasks::schedule_task( ['ELS'], 3600, 'install_els' );
    };
}

sub action_install_els {
    return sub {
        return if -e '/etc/els-release';    # ELS is already installed
        return if $RPM_IS_BROKEN;
        return unless Cpanel::OS::needs_els();
        return unless Cpanel::Server::Type::has_els();
        return run_action(
            show_status('Installing ELS'),
            background_install_els(),
        );
    };
}

sub action_find_and_fix_rpm_issues {
    return unless Cpanel::OS::is_rpm_based();

    return if $ENV{'CPANEL_BASE_INSTALL'};    # we will not get here if rpm is broken
    return sub {
        local $?;
        process( { 'status' => 'Checking RPM DB for corruption' } );
        process( { 'cmd'    => [ _find_and_fix_rpm_issue_script() ] } );

        if ( ( $? >> 8 ) > 0 ) {
            logger()->error('RPM is not functioning and automatic repair failed.');
            logger()->error('Tasks for update-packages, sysup, and check_cpanel_pkgs will be skipped.');
            $RPM_IS_BROKEN = 1;
        }

        return;
    };
}

sub action_updatesigningkey {

    # Update signing keys, if enabled.
    return unless Cpanel::Crypt::GPG::Settings::signature_validation_enabled();
    return (
        show_status('Updating cPanel signing keys.'),
        '/usr/local/cpanel/scripts/updatesigningkey'
    );
}

sub action_cloudlinux_update {

    return unless Cpanel::OS::supports_or_can_become_cloudlinux();

    return (
        show_status('Checking CloudLinux installation'),
        '/usr/local/cpanel/bin/cloudlinux_update',
    );
}

sub action_checkallsslcerts {

    # Base install does this in the background before upcp
    return if $ENV{'CPANEL_BASE_INSTALL'};

    my $max_delay_seconds = 18 * 60 * 60;                                                  # 18 hours
    my $bytes_to_get      = length($max_delay_seconds) + 1;
    my $rand_int          = Cpanel::Rand::Get::getranddata( $bytes_to_get, [ 0 .. 9 ] );
    my $delay_seconds     = $rand_int % $max_delay_seconds;

    # Should be between 1 and $max_delay_seconds
    # scheduling a task for 0 seconds will cause queueprocd to throw an error
    $delay_seconds++;

    return (
        show_status('Scheduling task to check service default SSL/TLS certificates'),
        sub {
            Cpanel::ServerTasks::schedule_task(
                ['ScriptTasks'],
                $delay_seconds,
                'run_script /usr/local/cpanel/bin/checkallsslcerts --allow-retry --verbose'
            );
        }
    );
}

sub action_build_locale_databases {
    return if $ENV{'CPANEL_BASE_INSTALL'};
    return (
        show_status('Ensuring locale databases are up to date'),
        sub {
            Cpanel::ServerTasks::schedule_task( ['LocaleTasks'], 300, "build_locale_databases" );
        }
    );
}

sub action_init_wwwacct_conf {
    return if touch_file_exists('/etc/wwwacct.conf');
    return (
        show_status('Creating account configuration file /etc/wwwacct.conf'),
        '/usr/local/cpanel/scripts/mkwwwacctconf',
    );
}

sub _var_named_path { return '/var/named' }    # for unit tests purpose

sub action_fixrndc {
    return if touch_file_exists('/etc/nameddisable') or touch_file_exists('/etc/binddisable');
    return if $ENV{'CPANEL_BASE_INSTALL'};                                                       # Base install does this in the background before upcp

    my $status = 'Checking and repairing nameserver config';
    if ( !touch_file_exists( _var_named_path() ) ) {
        return sub {
            mkdir( _var_named_path(), 0755 );    # probably safe to do it earlier and simplify this code

            return run_action(
                show_status($status),
                '/usr/local/cpanel/scripts/fixrndc -f',
            );
        };
    }

    return (
        show_status($status),
        '/usr/local/cpanel/scripts/fixrndc'
    );
}

sub action_ipaliases {
    return (
        show_status('Setting up IP aliases startup'),
        '/usr/local/cpanel/whostmgr/bin/setupipaliases',
    );
}

sub action_check_cpanel_pkgs {
    return if $ENV{'CPANEL_BASE_INSTALL'};
    return sub {    # need RPM_IS_BROKEN to be set
        my $cpconf = get_cpconf();
        if ($RPM_IS_BROKEN) {
            logger()->error('RPM is not functional. Skipping check_cpanel_pkgs.');
        }
        elsif ( $cpconf->{'maintenance_rpm_version_check'} ) {
            my $status        = 'Checking cPanel packages';
            my @rpmcheck_args = (qw{ --list-only --long-list --notify });
            my $its_a_weekday = _is_saturday_or_sunday() ? 0 : 1;
            if ( !$cpconf->{'maintenance_rpm_version_digest_check'} || $ENV{'CPANEL_BASE_INSTALL'} || $its_a_weekday ) {

                # the user doesn't want a digest check and we're not being forced into it #
                # In order to minimize server load and reduce install times we only do
                # a full digest check on the weekends if the user hasn't disabled it.
                $status .= ' (with no digest check or broken check)';
                push @rpmcheck_args, '--no-digest';
                push @rpmcheck_args, '--no-broken';
            }
            return run_action(
                show_status($status),
                join( ' ', '/usr/local/cpanel/scripts/check_cpanel_pkgs', @rpmcheck_args ),
            );
        }
        else {
            logger()->info('Skipping cPanel package check due to configuration');
        }
        return;
    };
}

sub action_ftpquotacheck {
    return unless Cpanel::Services::Enabled::is_enabled('ftp');
    return '/usr/local/cpanel/scripts/ftpquotacheck';
}

sub action_repair_mailman {
    return sub {    # postpone it as can binary can be there only once RPM is fixed
        my $cpconf = get_cpconf();
        return unless ( !$cpconf->{'skipmailman'} && file_is_executable("$Cpanel::ConfigFiles::MAILMAN_ROOT/bin/check_perms") );
        chdir("$Cpanel::ConfigFiles::MAILMAN_ROOT/bin");
        my $ok = run_action(
            show_status('Repairing Mailman Permissions'),
            './check_perms -f --noarchives',
        );
        chdir('/usr/local/cpanel');    # return where we should be ?
        return $ok;
    };
}

sub _mysqld_sh_path { return '/usr/local/etc/rc.d/mysqld.sh' }    # for unit test purpose only

sub action_repair_mysql {
    return unless touch_file_exists( _mysqld_sh_path() );
    return sub {
        unlink _mysqld_sh_path();
        return run_action(
            show_status('Repairing MySQL startup'),
            '/usr/local/cpanel/scripts/restartsrv mysql',
        );
    };
}

sub action_purge_modsec {
    return if $ENV{'CPANEL_BASE_INSTALL'};
    return '/usr/local/cpanel/scripts/purge_modsec_log';
}

# for unit test purpose only
sub _passwd_files_to_chmod {
    return [ '/etc/shadow.tmpeditlib', '/etc/master.passwd.tmpeditlib' ];
}

sub action_passwd {
    return sub {
        my $files = _passwd_files_to_chmod();

        # Quick security check on the tmpeditlib files in case they are there
        foreach my $f (@$files) {
            chmod( 0600, $f ) if touch_file_exists($f);
        }

        return;
    };
}

sub action_buildexim {
    return sub {    # postponed if the file is created/touched by one rpm (hook)... to preserve original behavior
        return
          if populated_touch_file_exists('/etc/exim.conf')
          and populated_touch_file_exists('/etc/exim.pl.local');

        # run only if one of the file is missing / empty
        return run_action(
            show_status('EXIM sanity checking'),
            '/usr/local/cpanel/scripts/buildeximconf --no_chown_spool',
        );
    };
}

sub action_eximstats {
    return sub {

        # Eximstats recover of /var/cpanel/sql/eximstats.sql, if it exists
        return unless touch_file_exists('/var/cpanel/sql/eximstats.sql');

        return run_action(
            show_status('Recovering data stored in /var/cpanel/sql/eximstats.sql'),
            '/usr/local/cpanel/scripts/restartsrv_eximstats'
        );

    };
}

# If eximstats is disabled, we need to handle clearing of old tracker files here.
sub action_exim_purge_old_tracker_files {
    return sub {
        my $cpconf = get_cpconf();
        return unless $cpconf->{'skipeximstats'} && $cpconf->{'skipeximstats'} eq '1';
        require Cpanel::EmailTracker::Purge;
        logger()->info('Purging old email tracker files');
        Cpanel::EmailTracker::Purge::purge_old_tracker_files();
        return;
    };
}

sub action_cleanup_signature {
    return (
        show_status('Cleaning Signature Timestamp Cache'),
        sub {
            my $sig_cache = Cpanel::Crypt::GPG::VendorKeys::TimestampCache->new();
            $sig_cache->cleanup_signature_cache();
            return;
        },
    );
}

sub action_enable_onboot_handler {
    return sub {

        # Ensure that the handler for code on reboot is enabled
        my $root_crontab = Cpanel::Cron::Utils::fetch_user_crontab('root');

        # Already enabled.
        return if $root_crontab =~ /\@reboot\s+\/usr\/local\/cpanel\/bin\/onboot_handler/;

        logger()->info("Enabling onboot_handler for root in cron");
        $root_crontab .= "\@reboot /usr/local/cpanel/bin/onboot_handler\n";
        Cpanel::Cron::Utils::save_root_crontab($root_crontab);
    }
}

# </end of actions>

# local cache configuration to be able to use them
{
    my $conf;    # state like variable

    sub get_update_conf {
        $conf = { Cpanel::Update::Config::load() } if !defined $conf;
        return $conf;
    }

    sub reset_update_conf {    # for testing purpose
        undef($conf);
        return;
    }
}

# loadcpconf already caches this so we don't need to re-cache it here.
*get_cpconf = \&Cpanel::Config::LoadCpConf::loadcpconf;

{

    my $logger;

    sub setup_logger {
        my ( $logfile_path, $starting_pbar ) = @_;
        return $logger = Cpanel::Update::Logger->new( { 'logfile' => $logfile_path, 'stdout' => 1, 'log_level' => 'info', defined $starting_pbar ? ( 'pbar' => $starting_pbar ) : () } );
    }

    sub logger {
        $logger = setup_logger() unless defined $logger;    # mainly for mocking
        return $logger;
    }
}

sub increment_pbar {
    my ( $start, $end, $items ) = @_;

    my $_current_ratio = $start;
    my $_last_update   = 0;

    # do a -1 to the total to leave it to the end
    my $points = ( $end - $start - 1 ) || 1;

    $items ||= $points;          # number of elements in our array
    my $w = $points / $items;    # default points to increase +1

    return sub {
        my (%opts) = @_;

        if ( $opts{complete} ) {

            # we reach the end we can now use the final result
            $_last_update = $_current_ratio = $end;
            logger()->update_pbar($end);
            return;
        }

        my $previous = $_current_ratio;
        $_current_ratio += $w;
        $_current_ratio = $end if $_current_ratio > $end;

        my $normalize = int($_current_ratio);

        # includes a protection to avoid displaying duplicates
        logger()->update_pbar($normalize);

        return;
    }
}

sub setupenv {
    Cpanel::Env::clean_env();
    delete $ENV{'DOCUMENT_ROOT'};
    delete $ENV{'SERVER_SOFTWARE'};
    if ( $ENV{'WHM50'} ) {
        $ENV{'GATEWAY_INTERFACE'} = 'CGI/1.1';
    }
    ( $ENV{'USER'}, $ENV{'HOME'} ) = ( getpwuid($>) )[ 0, 7 ];
    $ENV{'PATH'} .= ':/sbin:/usr/sbin:/usr/bin:/bin:/usr/local/bin';
    $ENV{'LANG'}   = 'C';
    $ENV{'LC_ALL'} = 'C';

    return;
}

sub setupcrontab {
    logger()->info('Setting up cronjobs');
    logger()->info('Setting Up update_db_cache Crontab');
    logger()->info('Setting Up update_maiman_cache Crontab');
    logger()->info('Setting Up dcpumon Crontab');

    try {
        Cpanel::Config::Crontab::sync_root_crontab();
    }
    catch {
        warn "Failed to sync root crontab: $_";
    };

    return;
}

sub clean_roundcube_attachment_directory {
    my $roundcube_tmp = '/var/cpanel/roundcube/tmp';
    opendir my $dh, $roundcube_tmp or return;
    my @old_files = grep { -M $_ > 7.0 } map { "$roundcube_tmp/$_" } grep { !m/^\.{1,2}$/ } readdir $dh;
    closedir $dh;

    my $clean = sub { unlink @old_files };
    return Cpanel::AccessIds::do_as_user( 'cpanelroundcube', $clean );
}

sub check_mysql_version {

    # no need to check on first install
    return if $ENV{'CPANEL_BASE_INSTALL'};

    my ( $reco_version, $current_version, $version_is_mysql, $display_name, $err );

    try {
        $current_version = Cpanel::MysqlUtils::Version::current_mysql_version();
    }
    catch {
        $err = $_;
    };

    if ($err) {
        logger()->info("Unable to determine MySQL version because of an error: $err. Skipping MySQL version check...");
        return;
    }
    elsif ( !$current_version->{'short'} ) {
        logger()->info("Unable to determine MySQL version. Skipping MySQL version check...");
        return;
    }

    # We check the remote mysql version in Install::CheckRemoteMySQLVersion,
    # so we'll skip the check here
    return if $current_version->{'is_remote'};

    $current_version  = $current_version->{'short'};
    $version_is_mysql = Cpanel::MysqlUtils::Version::version_is_mysql();
    $display_name     = $version_is_mysql ? "MySQL"                                                         : "MariaDB";
    $reco_version     = $version_is_mysql ? $Cpanel::MysqlUtils::Version::MINIMUM_RECOMMENDED_MYSQL_RELEASE : $Cpanel::MysqlUtils::Version::MINIMUM_RECOMMENDED_MARIADB_RELEASE;

    # if less than the minimum recommended version, recommend an update.
    if ( Cpanel::MysqlUtils::Version::is_at_least( $current_version, $reco_version ) ) {
        logger()->info("“$display_name” version “$current_version” is greater than or equal to the recommended minimum version, “$reco_version”.");
    }
    else {
        logger()->info("“$display_name” version “$current_version” is less than the recommended minimum version, “$reco_version”.");

        my @outdated = ();
        push @outdated,
          {
            'label'            => $display_name,
            'current_version'  => $current_version,
            'min_reco_version' => $reco_version,
            'upgrade_url'      => 'https://go.cpanel.net/mysqlup',
          };

        require Cpanel::Notify;
        Cpanel::Notify::notification_class(
            'class'            => 'OutdatedSoftware::Notify',
            'application'      => 'OutdatedSoftware::Notify',
            'constructor_args' => [
                'origin'            => 'scripts/maintenance',
                'outdated_software' => \@outdated,
            ]
        );
    }

    return;
}

sub ensure_active_mysql_profile_is_present {
    eval {
        require Cpanel::MysqlUtils::RemoteMySQL::ProfileManager;
        Cpanel::MysqlUtils::RemoteMySQL::ProfileManager->new()->generate_active_profile_if_none_set();
    };
    return 1;
}

#############################################################################

## Goes through cpupdate.conf and purge entries invalid since 11.36
sub purge_cpupdate_conf {

    my $dir = Cpanel::RPM::Versions::Directory->new( { 'directory' => '/var/cpanel/rpm.versions.d', 'logger' => logger() } );
    if ( $dir->config_changed() ) {
        $dir->save();
    }
    return;
}

our $upcp_log_dir = '/var/cpanel/updatelogs';

sub purge_upcp_logs {
    my ($days) = @_;

    if ( !defined $days ) {
        my $cpconf = get_cpconf();
        $days = $cpconf->{'upcp_log_retention_days'};
    }

    # On initial upgrade, upcp_log_retention_days isn't set yet. We'll enforce the default here.
    if ( $days < 3 ) {
        logger()->warning("upcp_log_retention_days unexpectedly set to $days. Temporarily setting to 45 days.");
        $days = 45;
    }

    logger()->info("Purging upcp logs older than $days days.");

    my $purge_older_than = time - ( 86400 * $days );
    opendir( my $dir_fh, $upcp_log_dir ) or do {
        logger()->warning("Cannot read '$upcp_log_dir' for purging.");
    };

    while ( my $file = readdir($dir_fh) ) {

        # Special files we don't purge
        next if ( $file eq '.' or $file eq '..' or $file eq 'summary.log' );

        # Skip if the file is new enough.
        my @stats = lstat("$upcp_log_dir/$file");
        next unless ( @stats && $stats[9] < $purge_older_than );

        # The file can be removed.
        unlink "$upcp_log_dir/$file";
    }

    closedir($dir_fh);
    return;
}

sub check_addon_licenses {
    return sub {

        # Base install does this in the background before upcp
        if ( !$ENV{'CPANEL_BASE_INSTALL'} ) {

            # Fire these off in a taskqueue so as not to hold up the rest of the script
            eval { Cpanel::ServerTasks::queue_task( ['ScriptTasks'], 'run_script /usr/local/cpanel/scripts/litespeed-check --run' ); };
            eval { Cpanel::ServerTasks::queue_task( ['ScriptTasks'], 'run_script /usr/local/cpanel/scripts/jetbackup-check --run' ); };
        }

        # Check for WordPress Toolkit license (regardless of whether in initial install or post-upcp maintenance)
        eval { Cpanel::ServerTasks::queue_task( ['ScriptTasks'], 'run_script /usr/local/cpanel/bin/wpt_license --download' ); };
    };
}

sub update_public_suffix_list {

    try {
        require IO::Socket::SSL::PublicSuffix;
        IO::Socket::SSL::PublicSuffix::update_self_from_url();

        require Cpanel::PublicSuffix;
        Cpanel::PublicSuffix::clear_cache();
    }
    catch {
        logger()->info('Unable to update the Pubic Suffix list');
    };

    return;
}

sub usage {
    print <<EOM;
Usage: $0 [options]

Perform cPanel nightly maintenance tasks for upcp.

Where the supported options are:

  --help
               Display this screen and exit

  --log={logfile path}
               Log program output to the file named by {logfile path}

EOM
    return 0;
}

exit( __PACKAGE__->script(@ARGV) || 0 ) if !caller();

1;

Edit Rename Chmod Delete

FILE FOLDER

Name	Size	Permission
cpan_sandbox	---	0755
php_sandbox	---	0755
MirrorSearch_pingtest	2437 bytes	0755
activesync-invite-reply	1734 bytes	0755
add_dns	2418 bytes	0755
adddns	2418 bytes	0755
addpop	6228 bytes	0755
addsystemuser	3345 bytes	0755
adduser	92 bytes	0755
apachelimits	4410 bytes	0755
archive_sync_zones	3096 bytes	0755
auto-adjust-mysql-limits	1854 bytes	0755
autorepair	1274 bytes	0755
backups_clean_metadata_for_missing_backups	1612 bytes	0755
backups_create_metadata	16126 bytes	0755
backups_list_user_files	4671 bytes	0755
balance_linked_node_quotas	2643 bytes	0755
biglogcheck	1729 bytes	0755
build_bandwidthdb_root_cache_in_background	1561 bytes	0755
build_cpnat	3494 bytes	0755
build_mail_sni	3966 bytes	0755
build_maxemails_config	1169 bytes	0755
builddovecotconf	6922 bytes	0755
buildeximconf	7167 bytes	0755
buildhttpdconf	2664 bytes	0755
buildnsdconf	1031 bytes	0755
buildpureftproot	539 bytes	0755
ccs-check	5031 bytes	0755
check_cpanel_pkgs	11007 bytes	0755
check_cpanel_rpms	218 bytes	0755
check_domain_tls_service_domains.pl	6841 bytes	0755
check_immutable_files	5621 bytes	0755
check_mail_spamassassin_compiledregexps_body_0	187 bytes	0755
check_maxmem_against_domains_count	3652 bytes	0755
check_mount_procfs	2072 bytes	0755
check_mysql	5684 bytes	0755
check_security_advice_changes	8477 bytes	0755
check_unmonitored_enabled_services	4666 bytes	0755
check_unreliable_resolvers	3672 bytes	0755
check_users_my_cnf	6191 bytes	0755
check_valid_server_hostname	7840 bytes	0755
checkalldomainsmxs	2462 bytes	0755
checkbashshell	1205 bytes	0755
checkccompiler	1253 bytes	0755
checkexim.pl	3172 bytes	0755
checklink	1323 bytes	0755
checknsddirs	1014 bytes	0755
checkusers	856 bytes	0755
chkmydns	561 bytes	0755
chkpaths	141 bytes	0755
chpass	416 bytes	0755
ckillall	1139 bytes	0755
clean_dead_mailman_locks	2141 bytes	0755
clean_up_temp_wheel_users	2498 bytes	0755
clean_user_php_sessions	4875 bytes	0755
cleandns	13408 bytes	0755
cleandns8	417 bytes	0755
cleanmsglog	735 bytes	0755
cleanphpsessions	932 bytes	0755
cleanphpsessions.php	658 bytes	0644
cleanquotas	1651 bytes	0755
cleansessions	6050 bytes	0755
cleanupinterchange	2706 bytes	0755
cleanupmysqlprivs	533 bytes	0755
clear_cpaddon_ui_caches	1301 bytes	0755
clear_orphaned_virtfs_mounts	3645 bytes	0755
comparecdb	1561 bytes	0755
compilers	2932 bytes	0755
compilerscheck	999 bytes	0755
configure_firewall_for_cpanel	520 bytes	0755
configure_rh_firewall_for_cpanel	520 bytes	0755
configure_rh_ipv6_firewall_for_cpanel	520 bytes	0755
convert2dovecot	682 bytes	0755
convert_accesshash_to_token	4171 bytes	0755
convert_and_migrate_from_legacy_backup	2017 bytes	0755
convert_maildir_to_mdbox	1703 bytes	0755
convert_mdbox_to_maildir	1698 bytes	0755
convert_roundcube_mysql2sqlite	25889 bytes	0755
convert_to_dovecot_delivery	4438 bytes	0755
convert_whmxfer_to_sqlite	1499 bytes	0755
copy_user_mail_as_root	1281 bytes	0755
copy_user_mail_as_user	1375 bytes	0755
cpaddonsup	3324 bytes	0755
cpan_config	2870 bytes	0755
cpanel_initial_install	68980 bytes	0755
cpanelsync	28991 bytes	0755
cpanelsync_postprocessor	1657 bytes	0755
cpanpingtest	965 bytes	0755
cpbackup	45841 bytes	0755
cpbackup_transport_file	5781 bytes	0755
cpdig	1853 bytes	0755
cpfetch	1258 bytes	0755
cphulkdblacklist	433 bytes	0755
cphulkdwhitelist	1336 bytes	0755
cpservice	2934 bytes	0755
cpuser_port_authority	19755 bytes	0755
cpuser_service_manager	11113 bytes	0755
createacct	25763648 bytes	0700
custom_backup_destination.pl.sample	5182 bytes	0755
custom_backup_destination.pl.skeleton	2906 bytes	0755
dav_change_hostname	3652 bytes	0755
dcpumon-wrapper	850 bytes	0755
delpop	6350 bytes	0755
detect_env_capabilities	508 bytes	0755
disable_prelink	2841 bytes	0755
disable_sqloptimizer	1524 bytes	0755
disablefileprotect	2137 bytes	0755
distro_changed_hook	1185 bytes	0755
dnscluster	4546 bytes	0755
dnsqueuecron	1316 bytes	0755
dnssec-cluster-keys	3840 bytes	0755
dovecot_maintenance	8123 bytes	0755
dovecot_set_defaults.pl	984 bytes	0755
dumpcdb	866 bytes	0755
dumpinodes	687 bytes	0755
dumpquotas	616 bytes	0755
dumpstor	913 bytes	0755
ea4_fresh_install	2699 bytes	0755
edit_cpanelsync_exclude_list	2641 bytes	0755
editquota	3518 bytes	0755
elevate-cpanel	386935 bytes	0700
email_archive_maintenance	6300 bytes	0755
email_hold_maintenance	1495 bytes	0755
enable_spf_dkim_globally	9039 bytes	0755
enable_sqloptimizer	1609 bytes	0755
enablefileprotect	2149 bytes	0755
ensure_autoenabled_features	2616664 bytes	0700
ensure_conf_dir_crt_key	4940 bytes	0755
ensure_cpuser_file_ip	2610 bytes	0755
ensure_crontab_permissions	1101 bytes	0755
ensure_dovecot_memory_limits_meet_minimum	3208 bytes	0755
ensure_hostname_resolves	2628 bytes	0755
ensure_includes	601 bytes	0755
ensure_vhost_includes	13851 bytes	0755
exim_tidydb	3036 bytes	0755
eximconfgen	1350 bytes	0755
eximstats_spam_check	867 bytes	0755
export_horde_calendars_to_ics	15431 bytes	0755
export_horde_contacts_to_vcf	14279 bytes	0755
exportmydnsdb	3552 bytes	0755
expunge_expired_certificates_from_sslstorage	3648 bytes	0755
expunge_expired_pkgacct_sessions	852 bytes	0755
expunge_expired_transfer_sessions	1089 bytes	0755
fastmail	5281 bytes	0755
featuremod	1970 bytes	0755
fetchfile	422 bytes	0755
find_and_fix_rpm_issues	7156 bytes	0755
find_outdated_services	5538 bytes	0755
find_pids_with_inotify_watch_on_path	3745 bytes	0755
fix-cpanel-perl	29516 bytes	0755
fix-listen-on-localhost	3604 bytes	0755
fix-web-vhost-configuration	6296 bytes	0755
fix_addon_permissions	7864 bytes	0755
fix_dns_zone_ttls	1369 bytes	0755
fix_innodb_tables	4149 bytes	0755
fix_pear_registry	4171 bytes	0755
fix_reseller_acls	11144 bytes	0755
fixetchosts	4424 bytes	0755
fixheaders	572 bytes	0755
fixmailinglistperms	1008 bytes	0755
fixmailman	2144 bytes	0755
fixnamedviews	1247 bytes	0755
fixndc	413 bytes	0755
fixquotas	17873 bytes	0755
fixrelayd	1784 bytes	0755
fixrndc	16877 bytes	0755
fixtar	503 bytes	0755
fixtlsversions	4816 bytes	0755
fixvaliases	2047 bytes	0755
fixwebalizer	966 bytes	0755
forcelocaldomain	895 bytes	0755
ftpfetch	2251 bytes	0755
ftpquotacheck	8511 bytes	0755
ftpsfetch	2416 bytes	0755
ftpupdate	261 bytes	0755
gather_update_log_stats	4354 bytes	0700
gather_update_logs_setupcrontab	5582 bytes	0700
gemwrapper	1783 bytes	0755
gencrt	6410 bytes	0755
generate_account_suspension_include	5840 bytes	0755
generate_google_drive_credentials	1135 bytes	0755
generate_google_drive_oauth_uri	984 bytes	0755
generate_maildirsize	14272 bytes	0755
gensysinfo	1185 bytes	0755
get_locale_from_legacy_name_info	2041 bytes	0755
getremotecpmove	12978 bytes	0755
grpck	1218 bytes	0755
hackcheck	3092 bytes	0755
hook	1487 bytes	0755
httpspamdetect	2724 bytes	0755
hulk-unban-ip	4117024 bytes	0700
import_exim_data	8593 bytes	0755
importmydnsdb	11610 bytes	0755
increase_filesystem_limits	891 bytes	0755
initacls	5107 bytes	0755
initfpsuexec	444 bytes	0755
initquotas	19942 bytes	0755
initsuexec	4123 bytes	0755
install_cpanel_analytics	1973 bytes	0755
install_dovecot_fts	1605 bytes	0755
install_plugin	2869 bytes	0755
installpkg	575 bytes	0755
installpostgres	6714 bytes	0755
installsqlite3	1866 bytes	0755
ipcheck	4020 bytes	0755
ipusage	7624 bytes	0755
isdedicatedip	602 bytes	0755
jetbackup-check	3776 bytes	0755
killdns	422 bytes	0755
killdns-dnsadmin	1180 bytes	0755
killmysqluserprivs	433 bytes	0755
killmysqlwildcard	1180 bytes	0755
killpvhost	853 bytes	0755
killspamkeys	937 bytes	0755
link_3rdparty_binaries	1271 bytes	0755
linksubemailtomainacct	3248 bytes	0755
listcheck	538 bytes	0755
listsubdomains	1074 bytes	0755
litespeed-check	3952 bytes	0755
locale_export	4935 bytes	0755
locale_import	4453 bytes	0755
locale_info	4086 bytes	0755
logo.dat	205 bytes	0644
magicloader	1985 bytes	0755
maildir_converter	6222 bytes	0755
mailperm	16973 bytes	0755
mailscannerupdate	2478 bytes	0755
mainipcheck	10236 bytes	0755
maintenance	47737 bytes	0755
make_config	407 bytes	0644
make_hostname_unowned	1189 bytes	0755
manage_extra_marketing	12712 bytes	0700
manage_greylisting	16577 bytes	0755
manage_mysql_profiles	20498 bytes	0755
migrate-pdns-conf	10062 bytes	0755
migrate_local_ini_to_php_ini	7587 bytes	0755
migrate_whmtheme_file_to_userdata	3025 bytes	0755
mkwwwacctconf	2385 bytes	0755
modify_accounts	4184 bytes	0755
modify_featurelist	9420 bytes	0700
modify_packages	3735 bytes	0755
modsec_vendor	16008 bytes	0755
mysqlconnectioncheck	6704 bytes	0755
mysqlpasswd	4190 bytes	0755
named.ca	1603 bytes	0644
named.rfc1912.zones	774 bytes	0644
notify_expiring_certificates	9592 bytes	0755
notify_expiring_certificates_on_linked_nodes	1361 bytes	0755
oopscheck	1142 bytes	0755
optimize_eximstats	3975 bytes	0755
patch_mail_spamassassin_compiledregexps_body_0	2452 bytes	0755
patchfdsetsize	2784 bytes	0755
pedquota	2310 bytes	0755
perform_sqlite_auto_rebuild_db_maintenance	2252 bytes	0755
perlinstaller	528 bytes	0755
perlmods	1204 bytes	0755
php_fpm_config	9968 bytes	0755
phpini_tidy	687 bytes	0755
pkgacct	89927 bytes	0755
post_snapshot	3232 bytes	0755
post_sync_cleanup	6237 bytes	0755
premodifyacct	62 bytes	0755
primary_virtual_host_migration	2502 bytes	0755
process_pending_cpanel_php_pear_registration	3575 bytes	0755
process_site_templates	7445 bytes	0755
proxydomains	9568 bytes	0755
ptycheck	724 bytes	0755
purge_modsec_log	1563 bytes	0755
purge_old_config_caches	2125 bytes	0755
pwck	708 bytes	0755
quickdnslookup	1159 bytes	0755
quickwhoisips	2348 bytes	0755
quota_auto_fix	1440 bytes	0755
quotacheck	22900 bytes	0755
rawchpass	460 bytes	0755
rdate	4913 bytes	0755
realadduser	5743 bytes	0755
realchpass	3336 bytes	0755
realperlinstaller	5805 bytes	0755
realrawchpass	425 bytes	0755
rebuild_available_addons_packages_cache	1301 bytes	0755
rebuild_available_rpm_addons_cache	1301 bytes	0755
rebuild_bandwidthdb_root_cache	1487 bytes	0755
rebuild_dbmap	5937 bytes	0755
rebuild_provider_openid_connect_links_db	1039 bytes	0755
rebuild_whm_chrome	2277 bytes	0755
rebuilddnsconfig	26842 bytes	0755
rebuildhttpdconf	2664 bytes	0755
rebuildinstalledssldb	2917 bytes	0755
rebuildippool	509 bytes	0755
rebuildnsdzones	1164 bytes	0755
rebuilduserssldb	948 bytes	0755
refresh-dkim-validity-cache	6110 bytes	0755
regenerate_tokens	2228 bytes	0755
reloadnsd	821 bytes	0755
remote_log_transfer	11875 bytes	0755
remove_dovecot_index_files	6028 bytes	0755
removeacct	21924040 bytes	0700
rescan_user_dovecot_fts	3048 bytes	0755
reset_mail_quotas_to_sane_values	6982 bytes	0755
resetmailmanurls	2077 bytes	0755
resetquotas	4789 bytes	0755
restartsrv	3310 bytes	0755
restartsrv_apache	422 bytes	0755
restartsrv_apache_php_fpm	10381968 bytes	0755
restartsrv_base	10381968 bytes	0755
restartsrv_bind	10381968 bytes	0755
restartsrv_chkservd	427 bytes	0755
restartsrv_clamd	10381968 bytes	0755
restartsrv_cpanalyticsd	10381968 bytes	0755
restartsrv_cpanel_php_fpm	10381968 bytes	0755
restartsrv_cpanellogd	10381968 bytes	0755
restartsrv_cpdavd	10381968 bytes	0755
restartsrv_cpgreylistd	10381968 bytes	0755
restartsrv_cphulkd	10381968 bytes	0755
restartsrv_cpipv6	10381968 bytes	0755
restartsrv_cpsrvd	10381968 bytes	0755
restartsrv_crond	10381968 bytes	0755
restartsrv_dnsadmin	10381968 bytes	0755
restartsrv_dovecot	10381968 bytes	0755
restartsrv_exim	10381968 bytes	0755
restartsrv_eximstats	504 bytes	0755
restartsrv_ftpd	426 bytes	0755
restartsrv_ftpserver	911 bytes	0755
restartsrv_httpd	10381968 bytes	0755
restartsrv_imap	437 bytes	0755
restartsrv_inetd	2525 bytes	0755
restartsrv_ipaliases	10381968 bytes	0755
restartsrv_lmtp	437 bytes	0755
restartsrv_mailman	10381968 bytes	0755
restartsrv_mydns	10381968 bytes	0755
restartsrv_mysql	10381968 bytes	0755
restartsrv_named	777 bytes	0755
restartsrv_nscd	10381968 bytes	0755
restartsrv_nsd	10381968 bytes	0755
restartsrv_p0f	10381968 bytes	0755
restartsrv_pdns	10381968 bytes	0755
restartsrv_pop3	437 bytes	0755
restartsrv_postgres	427 bytes	0755
restartsrv_postgresql	10381968 bytes	0755
restartsrv_powerdns	442 bytes	0755
restartsrv_proftpd	10381968 bytes	0755
restartsrv_pureftpd	10381968 bytes	0755
restartsrv_queueprocd	10381968 bytes	0755
restartsrv_rsyslog	10381968 bytes	0755
restartsrv_rsyslogd	437 bytes	0755
restartsrv_spamd	10381968 bytes	0755
restartsrv_sshd	10381968 bytes	0755
restartsrv_syslogd	2458 bytes	0755
restartsrv_tailwatchd	10381968 bytes	0755
restartsrv_unknown	10381968 bytes	0755
restartsrv_xinetd	422 bytes	0755
restorecpuserfromcache	2008 bytes	0755
restorepkg	38260760 bytes	0700
rfc1912_zones.tar	10240 bytes	0644
rpmup	4888 bytes	0755
rsync-user-homedir.pl	5903 bytes	0755
run_if_exists	512 bytes	0755
run_plugin_lifecycle	3616 bytes	0700
runstatsonce	440 bytes	0755
runweblogs	1045 bytes	0755
sa-update_wrapper	3418 bytes	0755
safetybits.pl	844 bytes	0755
secureit	4834 bytes	0755
securemysql	4651 bytes	0755
securerailsapps	3661 bytes	0755
securetmp	16371 bytes	0755
sendicq	474 bytes	0755
servicedomains	9568 bytes	0755
set_mailman_archive_perms	1796 bytes	0755
set_php_memory_limits	3758 bytes	0755
setpostgresconfig	6181 bytes	0755
setup_greylist_db	16577 bytes	0755
setup_modsec_db	1335 bytes	0755
setup_systemd_timer_for_plugins	4015 bytes	0700
setupftpserver	10726 bytes	0755
setupmailserver	9776 bytes	0755
setupnameserver	14078 bytes	0755
shrink_modsec_ip_database	13285 bytes	0755
simpleps	3124 bytes	0755
slurp_exim_mainlog	5914 bytes	0755
smartcheck	15492 bytes	0755
smtpmailgidonly	8346 bytes	0755
snapshot_prep	6017 bytes	0755
spamassassin_dbm_cleaner	5993 bytes	0755
spamassassindisable	3830 bytes	0755
spamboxdisable	2324 bytes	0755
sshcontrol	14722 bytes	0755
ssl_crt_status	3928 bytes	0755
suspendacct	18438 bytes	0755
suspendmysqlusers	4528 bytes	0755
swapip	3914 bytes	0755
sync-mysql-users-from-grants	1225 bytes	0755
sync_child_accounts	1813 bytes	0755
sync_contact_emails_to_cpanel_users_files	1163 bytes	0755
synccpaddonswithsqlhost	6753 bytes	0755
synctransfers	1971 bytes	0755
syslog_check	1391 bytes	0755
sysup	645 bytes	0755
test_sa_compiled	1093 bytes	0755
transfer_account_as_user	2398 bytes	0755
transfer_accounts_as_root	4870 bytes	0755
transfer_in_progress	3156 bytes	0755
transfer_in_progress.pod	312 bytes	0644
transfermysqlusers	9988808 bytes	0700
try-later	8140 bytes	0755
unblockip	667 bytes	0755
uninstall_cpanel_analytics	1230 bytes	0755
uninstall_dovecot_fts	562 bytes	0755
uninstall_plugin	2907 bytes	0755
unlink_service_account	2682 bytes	0755
unpkgacct	4713 bytes	0755
unslavenamedconf	863 bytes	0755
unsuspendacct	18230 bytes	0755
unsuspendmysqlusers	6873 bytes	0755
upcp	32315 bytes	0755
upcp-running	2768 bytes	0755
upcp.static	725603 bytes	0755
update-packages	4888 bytes	0755
update_apachectl	480 bytes	0755
update_db_cache	430 bytes	0755
update_dkim_keys	1485 bytes	0755
update_exim_rejects	1242 bytes	0755
update_existing_mail_quotas_for_account	4891 bytes	0755
update_known_proxy_ips	1002 bytes	0755
update_local_rpm_versions	4669 bytes	0755
update_mailman_cache	8545 bytes	0755
update_mysql_systemd_config	1280 bytes	0755
update_neighbor_netblocks	487 bytes	0755
update_sa_config	2196 bytes	0755
update_spamassassin_config	10988 bytes	0755
update_users_jail	691 bytes	0755
update_users_vhosts	801 bytes	0755
updatedomainips	605 bytes	0755
updatenameserverips	1696 bytes	0755
updatenow	5302 bytes	0755
updatenow.static	2001080 bytes	0755
updatesigningkey	1996 bytes	0755
updatessldomains	1856 bytes	0755
updatesupportauthorizations	2552 bytes	0755
updateuserdatacache	2529 bytes	0755
updateuserdomains	774 bytes	0755
upgrade_bandwidth_dbs	2272 bytes	0755
upgrade_subaccount_databases	2797 bytes	0755
userdata_wildcard_cleanup	5877 bytes	0755
userdirctl	5134 bytes	0755
validate_sshkey_passphrase	1244 bytes	0755
verify_api_spec_files	757 bytes	0755
verify_pidfile	2008 bytes	0755
verify_vhost_includes	7517 bytes	0755
vps_optimizer	8007 bytes	0755
vzzo-fixer	725 bytes	0755
whmlogin	2390 bytes	0755
whoowns	1155 bytes	0755
wpt_license	6569696 bytes	0700
wwwacct	25763648 bytes	0700
wwwacct2	88 bytes	0755
xfer_rcube_schema_migrate.pl	2460 bytes	0755
xfer_rcube_uid_resolver.pl	1846 bytes	0755
xferpoint	3201 bytes	0755
xfertool	16528 bytes	0755
zoneexists	800 bytes	0755

File Content: maintenance

File Content: `maintenance`