My CSF firewall keeps giving me an alert about a directory that is located in /tmp. I know there is suppose to be a /tmp/.webmin directory but now another one has appeared and it’s called: /tmp/.webmin-sitename (sitename is the name of my site). The CSF firewall is giving me an alert for that directory. It looks like it was created on Dec 17 at around 4PM.
I am not sure as to how this happened but any information on this would greatly be appreciated. Thank you!
Notes: This particular directory’s ownership/user is not ‘root’ but the name of my site instead.