What `/usr/bin/imunify360-agent add-sudouser --user "$username"` does?

Issue

Imunify360 administrators might be concerned after finding the following command, for example, in a DirectAdmin custom script such as /usr/local/directadmin/scripts/custom/user_create_post.sh:

/usr/bin/imunify360-agent add-sudouser --user "$username"

Environment

• Imunify360
• DirectAdmin

Solution

This is expected and safe.

Cause

/usr/bin/imunify360-agent add-sudouser --user "$username" is an internal/helper command used by Imunify360 integrations.

• It adds $username to the imunify360-sudousers group, not to the root group.

• Members of the imunify360-sudousers group are allowed to execute only /usr/bin/imunify360-command-wrapper with elevated permissions:

# grep imunify /etc/sudoers
%imunify360-sudousers ALL=NOPASSWD: /usr/bin/imunify360-command-wrapper
Defaults!/usr/bin/imunify360-command-wrapper !requiretty

• This is used to allow admins to communicate with the Imunify360 agent with admin-level permissions.

The historical case where DirectAdmin admin users appeared in the root group was investigated separately and was not identified as being caused by imunify360-agent add-sudouser.