Surge In System Integrity MD5sum Emails Last Month - Anyone Else?

consultant

• January 21, 2026 19:00

I periodically get the System Integrity check email after a system update. (Running Cpanel on Almalinux 8.)  I've run Cpanel for years and these notifications are infrequent (like maybe no more than once a month typically.)

I've been noticing in the last month (end of 2025, beginning of 2026) I'm getting them a lot more frequently (like once a week or more for about a month now.)  I haven't installed anything or changed the server config.  I verified, as usual, these are all caused by system updates.

Wondering why the significant increase in frequency.  Been running Alamalinux 8 for close to 2 years now and never seen it get this frequent?

• 

  quietFinn

  • January 21, 2026 20:05

  If you mean the emails from LFD (System Integrity checking detected a modified system file) then it's normal to get those often, only once a month is not normal, if your server has daily updates on.

   

  1
• 

  cPRex Jurassic Moderator

  • January 22, 2026 18:28

  It's also worth noting that since CSF isn't receiving updates anymore, these will likely continue to increase as their database gets more out of sync with the actual files in cPanel.

  0
• 

  consultant

  • January 22, 2026 18:59
  • Edited

  "It's also worth noting that since CSF isn't receiving updates anymore, these will likely continue to increase as their database gets more out of sync with the actual files in cPanel."

  This is what I was about to ask.  My frequency numbers are rough estimates but the trend has been an increase since CSF/LFD updates stopped.  My understanding is that Cpanel is going to take over updates, but it appears just security updates, not updates for the LFD Checksum function?
  
  If that's the case, then it seems turning off this function is inevitable as otherwise you will get false positives with increasing frequency which is counterproductive.
  
  I'm a bit surprised this hasn't been discussed already but maybe thats because only a small percentage of Cpanel Admins are running CSF or are just used to ignoring these emails in the first place?

  0
• 

  cPRex Jurassic Moderator

  • January 22, 2026 19:22

  Most people just ignore those messages, at least in my experience.

  I did speak with the team and confirmed that LFD will be included in our version as well, as they are all under one product, so you'll see updates happening there as well if you stick with the cPanel version of CSF.

  1

Please sign in to leave a comment.