Intrusion Exploit
Server: LiteSpeed
System: Linux cisadane.iixcp.rumahweb.net 5.14.0-427.42.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Nov 1 14:58:02 EDT 2024 x86_64
User: lenf4658 (1805)
PHP: 8.4.19
Disabled: NONE
Upload Files
File: //lib/systemd/system/kcare.service
[Unit]
Description=Loads kernelcare patches on startup
After=multi-user.target

[Service]
Type=oneshot

ExecStart=-/usr/bin/kcarectl --smart-update
RemainAfterExit=yes

# Record shutdown timestamp for anomaly detection (crash vs proper shutdown).
ExecStop=-/bin/sh -c "date +'%%s' > /var/cache/kcare/stopped.at"
# Ordinary reboot will lead to the service stopping and we
# can delete smart-update lock file.
ExecStop=-/bin/sh -c "rm -rf /var/cache/kcare/.kcareprev.lock"
# KPT-5409: unload patches only on system shutdown/reboot, not on regular
# service stop/restart. kcare_load() handles re-patching atomically so
# restarting the service does not require an unload cycle.
ExecStop=/bin/sh -c "if [ \"$(systemctl is-system-running 2>/dev/null)\" = stopping ]; then /usr/bin/kcarectl --unload; fi"

[Install]
WantedBy=multi-user.target