FM / alternatives

/etc/alternatives

Name	Size	Mode	Actions
apropos	-	0	edit dl rm
apropos.1.gz	2717	0644	edit dl rm
arptables	-	0	edit dl rm
arptables-helper	-	0	edit dl rm
arptables-man	4500	0644	edit dl rm
arptables-restore	-	0	edit dl rm
arptables-restore-man	935	0644	edit dl rm
arptables-save	-	0	edit dl rm
arptables-save-man	1103	0644	edit dl rm
cifs-idmap-plugin	15184	0755	edit dl rm
ebtables	-	0	edit dl rm
ebtables-man	12262	0644	edit dl rm
ebtables-restore	-	0	edit dl rm
ebtables-save	-	0	edit dl rm
imunify-realtime-av	-	0	edit dl rm
ip6tables	-	0	edit dl rm
ip6tables-restore	-	0	edit dl rm
ip6tables-save	-	0	edit dl rm
iptables	-	0	edit dl rm
iptables-restore	-	0	edit dl rm
iptables-save	-	0	edit dl rm
ld	1791608	0755	edit dl rm
libnssckbi.so.x86_64	248448	0755	edit dl rm
man	-	0	edit dl rm
man.1.gz	11598	0644	edit dl rm
modulecmd	669702	0755	edit dl rm
modules.csh	109	0644	edit dl rm
modules.sh	479	0644	edit dl rm
mta	1284	0755	edit dl rm
mta-mailq	-	0	edit dl rm
mta-mailqman	27423	0644	edit dl rm
mta-newaliases	-	0	edit dl rm
mta-pam	-	0	edit dl rm
mta-rmail	-	0	edit dl rm
mta-rsmtp	-	0	edit dl rm
mta-runq	-	0	edit dl rm
mta-sendmail	1284	0755	edit dl rm
nc	-	0	edit dl rm
nc-man	10919	0644	edit dl rm
qtchooser-5	-	0	edit dl rm
qtchooser-default	-	0	edit dl rm
soelim	-	0	edit dl rm
soelim.1.gz	1935	0644	edit dl rm
whatis	-	0	edit dl rm
whatis.1.gz	2553	0644	edit dl rm

Edit: /usr/sbin/exim (1284B)

#!/usr/bin/bash
##CageFS proxyexec wrapper - ver 17

if [[ $EUID -eq 0 ]]; then
    echo 'Cannot be run as root'
    exit 1
fi

USR=`/usr/bin/whoami`
USER_TOKEN_PATH="/var/.cagefs/.cagefs.token"
WEBSITE_ISOLATION_FLAG="/opt/cloudlinux/flags/enabled-flags.d/website-isolation.flag"
if [[ -f "$WEBSITE_ISOLATION_FLAG" && -n "$WEBSITE_TOKEN_PATH" ]]; then
    USER_TOKEN_PATH="$WEBSITE_TOKEN_PATH"
fi
TOKEN=`/bin/cat ${USER_TOKEN_PATH}`
# It's user's tmp directory and write to it is secure procedure
# because this script is running only under usual user
PIDFILE="/tmp/.cagefs.proxy.$$"
USER_INTERRUPT=13
CWD=`pwd`

ctrl_c_handler() {
    if [[ -f "$PIDFILE" ]]; then
        pid=`/bin/cat $PIDFILE`
        /bin/rm -f $PIDFILE > /dev/null 2>&1
        /bin/kill -s SIGINT "$pid" > /dev/null 2>&1
    fi
    exit $USER_INTERRUPT
}

if [[ -e /var/.cagefs/origin ]]; then
    ORIGIN=`/bin/cat /var/.cagefs/origin`
    REMOTE="/usr/bin/ssh -F /etc/ssh/cagefs-rexec_config $USR@$ORIGIN"
    $REMOTE CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
    RETVAL=$?
else
    trap 'ctrl_c_handler' 2
    CAGEFS_TOKEN="$TOKEN" /usr/sbin/proxyexec -c cagefs.sock "$USR" "$CWD" EXIM $$ "$@"
    RETVAL=$?
    /bin/rm -f $PIDFILE > /dev/null 2>&1
fi

exit $RETVAL

cmd: