FM / multi-user.target.wants

/etc/systemd/system/multi-user.target.wants/

/etc/systemd/system/multi-user.target.wants

Name	Size	Mode	Actions
aibolit-resident.service	947	0644	edit dl rm
atd.service	222	0644	edit dl rm
auditd.service	1852	0644	edit dl rm
chronyd.service	551	0644	edit dl rm
cpanel-onboot.service	684	0644	edit dl rm
cpanel.service	716	0644	edit dl rm
cpanelquotaonboot.service	324	0644	edit dl rm
cpipv6.service	548	0644	edit dl rm
crond.service	356	0644	edit dl rm
csf.service	270	0644	edit dl rm
dovecot.service	362	0644	edit dl rm
ea-php74-php-fpm.service	716	0644	edit dl rm
ea-php82-php-fpm.service	716	0644	edit dl rm
exim.service	427	0644	edit dl rm
fastmail.service	316	0644	edit dl rm
httpd.service	608	0644	edit dl rm
imunify-antivirus.service	3843	0644	edit dl rm
imunify-notifier.service	388	0644	edit dl rm
ipaliases.service	654	0644	edit dl rm
irqbalance.service	475	0644	edit dl rm
lfd.service	226	0644	edit dl rm
mailman.service	248	0644	edit dl rm
mariadb.service	5528	0644	edit dl rm
mdmonitor.service	310	0644	edit dl rm
nfs-client.target	413	0644	edit dl rm
nftables.service	393	0644	edit dl rm
nscd.service	512	0644	edit dl rm
pdns.service	1426	0644	edit dl rm
pure-authd.service	282	0644	edit dl rm
pure-ftpd.service	312	0644	edit dl rm
remote-fs.target	522	0644	edit dl rm
rpcbind.service	544	0644	edit dl rm
rsyslog.service	960	0644	edit dl rm
securetmp.service	352	0644	edit dl rm
smartd.service	329	0644	edit dl rm
sshd.service	456	0644	edit dl rm
sssd.service	772	0644	edit dl rm
sw-engine.service	515	0644	edit dl rm
sysstat.service	475	0644	edit dl rm
tuned.service	439	0644	edit dl rm
wp-toolkit-background-tasks.service	341	0644	edit dl rm
wp-toolkit-scheduled-tasks.service	339	0644	edit dl rm

Edit: /usr/lib/systemd/system/imunify-antivirus.service (3843B)

[Unit]
Description=ImunifyAV
After=network.target
Requires=imunify-antivirus.socket imunify-antivirus-user.socket imunify-antivirus-sensor.socket
Wants=imunify-notifier.socket
# Service will NOT start if this file exists
ConditionPathExists=!/var/lib/rpm-state/imunify360-transaction-in-progress

[Service]
Environment=PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION=cpp
Environment=LANG=en_US.UTF-8
Environment=LC_ALL=en_US.UTF-8
Environment=PYTHONNOUSERSITE=1
Environment=SQLITE_TMPDIR=/var/imunify360/tmp
Type=simple
ExecStart=/usr/bin/imunify-service
ExecStartPost=/bin/bash -c "echo $MAINPID > /var/run/imunify-antivirus.pid"
PIDFile=/var/run/imunify-antivirus.pid
#TODO: must be not less than defence360agent/cli/server.py:stop(seconds=8)
TimeoutStopSec=90
RestartSec=5
StartLimitInterval=600s
StartLimitBurst=5
# Orphans child processes instead of killing them when the main process is shut down.
KillMode=process
# NoNewPrivileges=true
# CapabilityBoundingSet=CAP_BPF CAP_CHOWN CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH CAP_FOWNER CAP_KILL CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_PERFMON CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYS_RESOURCE
# AmbientCapabilities=CAP_BPF CAP_CHOWN CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH CAP_FOWNER CAP_KILL CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_PERFMON CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYS_RESOURCE
ProtectSystem=false
# AV runs the same Python package but only the AV-relevant subsystems;
# /etc/init is the upstart override dir for legacy distros (pure-ftpd).
# /etc/imunify360 is needed for user_config writes triggered by the
# shared 'config update --user' RPC and migrations under
# defence360agent/migrations/ (e.g. 153_migrate_config_default_action).
# ReadWritePaths=/etc/sysconfig/imunify360
# ReadWritePaths=/etc/imunify360
# ReadWritePaths=/etc/imunify-agent-proxy
# ReadWritePaths=/etc/cron.d
# ReadWritePaths=-/etc/init
# iMAV runs the same proactive code path on solo cPanel and writes
# the malware-list tempfiles in the Plesk modsec dir.
# ReadWritePaths=-/usr/share/i360-php-opts
# ReadWritePaths=-/etc/httpd/conf/modsecurity.d
# DirectAdmin persists its root login key (data/users/admin/login_keys/)
# when the agent runs `directadmin root-auth-url` to resolve docroots;
# once the previous key expires that write fails with EROFS without this.
# ReadWritePaths=-/usr/local/directadmin
# iMAV solo-cPanel hits the same cPanel hook installer; cagefs lines
# are harmless and future-proof on AV configs that don't use cagefs.
# ReadWritePaths=-/usr/local/cpanel
# ReadWritePaths=-/etc/cagefs
# ReadWritePaths=-/var/cagefs
# ReadWritePaths=-/usr/share/cagefs
# Plesk plugin scripts dir: the agent installs/updates the
# imunify360 Plesk extension's PHP scripts here.
# ReadWritePaths=-/usr/local/psa/admin/plib/modules/imunify360
# Plesk runtime state — notification log written by send-notifications.php
# (/usr/local/psa/var/modules/imunify360/imunify360-local.log) and the
# plesk-sendmail spool/tempfile dir. ProtectSystem=true bind-mounts /usr
# read-only and CAP_DAC_OVERRIDE cannot bypass a mount-layer RO, so the
# Plesk notification hook fails with EACCES without this entry.
# ReadWritePaths=-/usr/local/psa/var
# Webuzo Apache/modsec tree. iMAV runs the same resident-agent modsec
# sensor, which persists its filetail state beside the audit log under
# /usr/local/apps; read-only /usr would fail that write with EROFS.
# ReadWritePaths=-/usr/local/apps
# PrivateTmp= deliberately not set — see imunify360.service for the
# rationale (shared /tmp is required for the Sample backup backend
# fixture and for inotify-watching user-writable /tmp on hosts).

[Install]
WantedBy=multi-user.target
# Alias does not work in ubuntu. Used [Socket]Service= in imunify-antivirus-user.socket instead
#Alias=imunify-antivirus-user.service

cmd: