cPanel Fileman::savefile Error and Imunify360 cpanel_fileman_hook -­-­save

Issue

• The error only appears if the "Block malicious file uploads via cPanel File Manager" feature is enabled, in Imunify360. 
• Error: Failed to parse adminbin request: Request is too long (length is 74603, maximum length is 65535) at /usr/local/cpanel/Cpanel/AdminBin/Server.pm line 162.

Environment

• Imunify360
• Malware Scanner
• cPanel File Manager

Solution

I. As a temporary solution, the option "Block malicious file uploads via cPanel File Manager" can be disabled in the Imunify360 settings:

• Block malicious file uploads via cPanel File ManagerExperimental – enable blocking malicious file uploads via cPanel File Manager. Also, the file operations via cPanel File Manager that turn out to be malicious are blocked. https://docs.imunify360.com/dashboard/#general-2 

II. Another way to fix the issue is recreate hooks with the following instruction.

In case of a problem with recreation cPanel hooks, need to check that spec of these hooks in file /usr/libexec/imunify360/cpanel_fileman_hook (see variable: `DESCRIBE_DATA`) is consistent with the spec in the output of the command:

/usr/local/cpanel/bin/manage_hooks list

All values should be the same. In case of some difference it's not possible to remove hooks correctly, and the next steps should be taken:

1. Change fields values escalateprivs from 0 to 1 in file /usr/libexec/imunify360/cpanel_fileman_hook

2. After that run:

imunify360-agent config update '{"MALWARE_SCANNING": {"enable_scan_cpanel": false}}'

3. Then return values of escalateprivs to 0 in /usr/libexec/imunify360/cpanel_fileman_hook again.

4. And recreate hooks by:

imunify360-agent config update '{"MALWARE_SCANNING": {"enable_scan_cpanel": true}}'

Part of the issue was fixed in the task with id DEF-17986 and CPANEL-38925, another part of the problem will be solved under the task with id DEF-18994.