FM / run

/run

Name	Size	Mode	Actions
apache2/	-	0710	rm
blkid/	-	0755	rm
chkservd/	-	0755	rm
chkservd.services_suspend/	-	0700	rm
clamd.scan/	-	0710	rm
console/	-	0755	rm
cryptsetup/	-	0700	rm
dbus/	-	0755	rm
dovecot/	-	0755	rm
ea-ruby24-passenger/	-	0755	rm
faillock/	-	0755	rm
gt/	-	0711	rm
initramfs/	-	0755	rm
iptraf-ng/	-	0755	rm
libcare/	-	0755	rm
lldpd/	-	0755	rm
lock/	-	0755	rm
log/	-	0755	rm
mod_fcgid/	-	0750	rm
mount/	-	0755	rm
mysqld/	-	0755	rm
named/	-	0755	rm
net-snmp/	-	0755	rm
netreport/	-	0775	rm
nscd/	-	0755	rm
nxlog/	-	0755	rm
plymouth/	-	0755	rm
portreserve/	-	0755	rm
puppet/	-	0755	rm
pure-ftpd/	-	0700	rm
restartsrv/	-	0700	rm
rpcbind/	-	0700	rm
screen/	-	0775	rm
sepermit/	-	0755	rm
setrans/	-	0755	rm
sudo/	-	0711	rm
svnserve/	-	0700	rm
sysconfig/	-	0755	rm
systemd/	-	0755	rm
tmpfiles.d/	-	0755	rm
tuned/	-	0755	rm
udev/	-	0755	rm
user/	-	0755	rm
zabbix/	-	0755	rm
acpid.pid	7	0644	edit dl rm
acpid.socket	-	0666	edit dl rm
apache-monitor.pid	6	0600	edit dl rm
atd.pid	7	0644	edit dl rm
auditd.pid	4	0644	edit dl rm
autofs.fifo--	-	0600	edit dl rm
backup_maint_checker.pid	5	0644	edit dl rm
collectd-unixsock	-	0770	edit dl rm
cpanellogd.pid	6	0644	edit dl rm
cpdavd.pid	6	0644	edit dl rm
cpsrvd.pid	6	0644	edit dl rm
cron.reboot	0	0000	edit dl rm
crond.pid	7	0644	edit dl rm
datacycle.start	6	0644	edit dl rm
datacycle.stop	6	0644	edit dl rm
dnsadmin.pid	4	0644	edit dl rm
eig_limits.lock	17	0644	edit dl rm
eig_performance.start	6	0644	edit dl rm
eig_performance.stop	6	0644	edit dl rm
ftpd.sock	-	0600	edit dl rm
gssproxy.pid	7	0600	edit dl rm
gssproxy.sock	-	0666	edit dl rm
libcare.sock	-	0660	edit dl rm
monit.pid	7	0644	edit dl rm
monit.sock	-	0755	edit dl rm
ntpd.pid	6	0644	edit dl rm
osqueryd.pidfile	6	0600	edit dl rm
portreserve.pid	7	0644	edit dl rm
proc-monitor.pid	6	0600	edit dl rm
pure-authd.pid	7	0644	edit dl rm
pure-ftpd.pid	7	0644	edit dl rm
qga.state	25	0600	edit dl rm
queueprocd.pid	6	0644	edit dl rm
rbld.pid	7	0660	edit dl rm
rbld.sock	-	0660	edit dl rm
restartsrv_acpid	0	0644	edit dl rm
restartsrv_apache-monitor	0	0644	edit dl rm
restartsrv_apache_php_fpm	0	0644	edit dl rm
restartsrv_atd	0	0644	edit dl rm
restartsrv_autofs	0	0644	edit dl rm
restartsrv_clamd	0	0644	edit dl rm
restartsrv_collectd	0	0644	edit dl rm
restartsrv_cpanalyticsd	0	0644	edit dl rm
restartsrv_cpanellogd	0	0644	edit dl rm
restartsrv_cpanel_exporter	0	0644	edit dl rm
restartsrv_cpanel_php_fpm	0	0644	edit dl rm
restartsrv_cpdavd	0	0644	edit dl rm
restartsrv_cpgreylistd	0	0644	edit dl rm
restartsrv_cphulkd	0	0644	edit dl rm
restartsrv_cpsrvd	0	0644	edit dl rm
restartsrv_datacycle	0	0644	edit dl rm
restartsrv_dnsadmin	0	0644	edit dl rm
restartsrv_dovecot	0	0644	edit dl rm
restartsrv_eigeximlogd	0	0644	edit dl rm
restartsrv_eig_performance	0	0644	edit dl rm
restartsrv_exim	0	0644	edit dl rm
restartsrv_exim_exporter	0	0644	edit dl rm
restartsrv_getty@tty1	0	0644	edit dl rm
restartsrv_grafana-agent	0	0644	edit dl rm
restartsrv_gssproxy	0	0644	edit dl rm
restartsrv_gt_job	0	0644	edit dl rm
restartsrv_httpd	0	0644	edit dl rm
restartsrv_iptables_exporter	0	0644	edit dl rm
restartsrv_irqbalance	0	0644	edit dl rm
restartsrv_lldpd	0	0644	edit dl rm
restartsrv_mailman	0	0644	edit dl rm
restartsrv_monit	0	0644	edit dl rm
restartsrv_mysql	0	0644	edit dl rm
restartsrv_named	0	0644	edit dl rm
restartsrv_nscd	0	0644	edit dl rm
restartsrv_ntpd	0	0644	edit dl rm
restartsrv_nxlog	0	0644	edit dl rm
restartsrv_osqueryd	0	0644	edit dl rm
restartsrv_p0f	0	0644	edit dl rm
restartsrv_polkit	0	0644	edit dl rm
restartsrv_portreserve	0	0644	edit dl rm
restartsrv_proc-monitor	0	0644	edit dl rm
restartsrv_pure-authd	0	0644	edit dl rm
restartsrv_pure-ftpd	0	0644	edit dl rm
restartsrv_pureftpd	0	0644	edit dl rm
restartsrv_qemu-guest-agent	0	0644	edit dl rm
restartsrv_queueprocd	0	0644	edit dl rm
restartsrv_rbld	0	0644	edit dl rm
restartsrv_rpc-statd	0	0644	edit dl rm
restartsrv_rpcbind	0	0644	edit dl rm
restartsrv_rsyslog	0	0644	edit dl rm
restartsrv_serial-getty@ttyS0	0	0644	edit dl rm
restartsrv_smartd	0	0644	edit dl rm
restartsrv_snmpd	0	0644	edit dl rm
restartsrv_spamd	0	0644	edit dl rm
restartsrv_sshd	0	0644	edit dl rm
restartsrv_sshd_client	0	0644	edit dl rm
restartsrv_sys-snap	0	0644	edit dl rm
restartsrv_systemd-journald	0	0644	edit dl rm
restartsrv_systemd-logind	0	0644	edit dl rm
restartsrv_systemd-udevd	0	0644	edit dl rm
restartsrv_tailwatchd	0	0644	edit dl rm
restartsrv_taniumclient	0	0644	edit dl rm
restartsrv_tuned	0	0644	edit dl rm
restartsrv_zabbix-agent	0	0644	edit dl rm
rpc.statd.pid	7	0644	edit dl rm
rpcbind.lock	0	0444	edit dl rm
rpcbind.sock	-	0666	edit dl rm
sm-notify.pid	5	0600	edit dl rm
spamd.pid	7	0644	edit dl rm
sshd.pid	7	0644	edit dl rm
sshd_client.pid	7	0644	edit dl rm
syslogd.pid	6	0600	edit dl rm
system_needs_reboot.cache	277	0600	edit dl rm
tailwatchd.pid	6	0600	edit dl rm
utmp	4992	0664	edit dl rm
xtables.lock	0	0600	edit dl rm

Edit: /run/utmp (4992B)

~~~reboot4.19.286-203.ELK.el7.x86_64��g�� ,�ttyS0tyS0LOGIN,��h4O��tty1tty1LOGIN��hz�3~~~runlevel4.19.286-203.ELK.el7.x86_642��gi�pts/0ts/0zi��)=XRpts/1ts/1��j��)=�mpts/2ts/2#%i��)=p/pts/0/0oot162.214.41.61:S.0�ziqgpts/2/2oot162.214.41.61:S.0ri��pts/3ts/3�zi�z ��)=��pts/3/3oot162.214.41.61:S.0��ic�pts/4ts/4�Kjo%��)=~�pts/5ts/5�Aj� ��)=