🐛 Bug: <title> Binary location for [CHATTR] [/usr/bin/chattr] in /etc/csf/csf.conf is either incorrect

[Crip-Zone]

CSF › Version

v15.10 (cPanel)

CSF › Release

Stable

System › OS

Linux

System › Distro & Version

AlmaLinux 8.10

Control Panel › Name

cPanel

Priority

Normal

Issue Description

Hi, I've recently got the following error sent to me via email, although, I'm not sure is there is anything to worry about as CSF and cPanel seem to be working as expected:

removed directory '/usr/src/csf'
removed '/usr/src/csf.tgz'
�[1;38;5;15;48;5;27m INFO �[0m �[38;5;244m Please wait, restarting CSF and LFD services�[0m�[0m
lfd will restart csf within the next 5 seconds
WARNING Binary location for [CHATTR] [/usr/bin/chattr] in /etc/csf/csf.conf is either incorrect, is not installed or is not executable
WARNING Missing or incorrect binary locations will break csf and lfd functionality
● lfd.service - ConfigServer Firewall & Security - lfd
Loaded: loaded (/usr/lib/systemd/system/lfd.service; enabled; vendor preset: disabled)
Active: active (running) since Sat 2026-02-28 01:06:16 EST; 21ms ago
Process: 2354422 ExecStart=/usr/sbin/lfd (code=exited, status=0/SUCCESS)
Main PID: 2354432 (lfd - starting)
Tasks: 1 (limit: 307072)
Memory: 25.7M
CGroup: /system.slice/lfd.service
└─2354432 lfd - starting

Feb 28 01:06:16 piglet.host-for.org systemd[1]: Starting ConfigServer Firewall & Security - lfd...
Feb 28 01:06:16 piglet.host-for.org systemd[1]: Started ConfigServer Firewall & Security - lfd.
�[1;38;5;15;48;5;64m PASS �[0m �[38;5;244m Update complete! View changelog at �[38;5;33mhttps://download.configserver.dev/csf/changelog.txt�[0m�[0m

Steps To Reproduce

Itv was an email sent to me via the server.

Logs › Lfd

No response

Config › csf.conf

No response

Screenshots

No response

[Aetherinox]

I'll investigate today and see where that is coming from.

I do however, see a bug right off the bat. Logs are not supposed to show this special characters. So I'll address that as well.

�[1;38;5;15;48;5;64m PASS �[0m �[38;5;244m Update complete! View changelog at �[38;5;33mhttps://download.configserver.dev/csf/changelog.txt�[0m�[0m

[Crip-Zone]

Thanks!

[Aetherinox]

There are a few ways to trigger that specific email template. Can you tell me what the subject of the email was and/or what action you performed to get the email.

Also, on your server, run the following command:

which chattr
/usr/bin/chattr

You should get an output on where chattr is located.

[Crip-Zone]

The subject is:

Cron <root@*****t> /usr/sbin/csf -u

It was just a server email that I receive when there's an error.

For the 1st command:

no chattr in (/usr/local/cpanel/3rdparty/lib/path-bin:/usr/share/Modules/bin:/usr/local/cpanel/3rdparty/lib/path-bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/opt/cpanel/composer/bin:/root/bin)

For the 2nd command:

-bash: /usr/bin/chattr: No such file or directory

[Aetherinox]

Ah ok, then you you don't have chattr installed on your system at all.

Yeah, that's fine. It is for settings like LF_SCRIPT_PERM that deals with permissions. It can be installed using:

sudo dnf install e2fsprogs

It allows for certain files to be immutable, with no changes being allowed to specific files, and you get an email if something tries to write to those files.

The error simply means the binary of where chattr usually is, cannot be found on your system.

[Crip-Zone]

I tried to install it but it said it was already installed. LOL However, I just checked and didn't see a directory nor a file with the name in /usr/bin/

So, should I add it or just leave it as is?

[Aetherinox]

If you're not going to use the feature then yeah, there's nothing you really need to do in terms of fixing it.

The other option is to do a server-side search using find to try and locate chattr. Wherever it is on your server, it's not available from PATH otherwise it would have returned using the which command.

[Crip-Zone]

Good point. Thanks, again. :)