root@panel:~# ls -la /etc/phpmyadmin/
total 28
drwxr-xr-x 3 root hestiamail 4096 Nov 28 20:59 .
drwxr-xr-x 122 root root 12288 Nov 28 20:57 ..
drwxr-x--- 2 root hestiamail 4096 Nov 28 18:50 conf.d
-rw-r----- 1 root hestiamail 1033 Nov 28 20:59 config.inc.php
-rw-r----- 1 root www-data 297 Nov 28 20:59 hestia-sso.inc.php
root@panel:~# grep hestiamail /etc/{passwd,group}
/etc/passwd:hestiamail:x:1000:1000:[email protected]:/home/hestiamail:/bin/sh
/etc/group:hestiamail:x:1000:
root@panel:~# grep -r hestiamail /etc/php/
/etc/php/5.6/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/5.6/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/5.6/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/7.4/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/7.4/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/7.4/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/7.3/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/7.3/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/7.3/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/7.1/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/7.1/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/7.1/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/7.2/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/7.2/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/7.2/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/8.1/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/8.1/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/8.1/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/8.2/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/8.2/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/8.2/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/8.2/fpm/pool.d/www.conf:;"hestiamail" user created to prevent users fro m abusing this config
/etc/php/8.2/fpm/pool.d/www.conf:user = hestiamail
/etc/php/8.0/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/8.0/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/8.0/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/7.0/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/7.0/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/7.0/fpm/pool.d/dummy.conf:user = hestiamail
/etc/php/8.3/fpm/pool.d/dummy.conf:listen.owner = hestiamail
/etc/php/8.3/fpm/pool.d/dummy.conf:;"hestiamail" user created to prevent users f rom abusing this config
/etc/php/8.3/fpm/pool.d/dummy.conf:user = hestiamail
root@panel:~# ls -ld /usr/share/phpmyadmin/tmp/
drwxrwx--- 2 root hestiamail 4096 Nov 28 18:50 /usr/share/phpmyadmin/tmp/
root@panel:~# ls -ld /var/lib/roundcube/