\.log(?:[.-]\d)?(?:\.gz)?$|\.ini$|\.socket$|\.sock$|/error_log$|^/usr/share/cagefs-skeleton(?:$|/)|^/tmp/lshttpd/.+?\.sock$|^/tmp/lshttpd/.+?\.rtreport[.0-9]*$|^/usr/local/apache/domlogs(?:$|/)|^/var/log/(?:apache2?|httpd)/domlogs(?:$|/)|^/etc/(?:apache2?|httpd)/logs/domlogs(?:$|/)|^/var/ossec(?:$|/)|^/(home[1-9]?|var/www|var/imunify360/tmp)/\.restore-infected/.*(?:$|/)|^(?:/home3|/home2|/home)/(?:cagefs-skeleton(?:$|/)|[^/]+/\.cagefs/(?:var|opt)(?:$|/)|[^/]+/\.cagefs/tmp/php\w{1,8}|[^/]+/\.cl\.selector(?:$|/)|[^/]+/lscache(?:$|/)|\.imunify\.quarantined(?:$|/)|virtfs(?:$|/)|[^/]+/\.cpanel(?:$|/)|[^/]+/\.cphorde(?:$|/)|[^/]+/\.spamassasin(?:$|/)|[^/]+/\.subaccounts(?:$|/)|[^/]+/mail(?:$|/)|[^/]+/ssl(?:$|/)|[^/]+/logs/*\.log|[^/]+/logs/*\.gz|[^/]+/logs/*\.tar\.gz|[^/]+/tmp(?:$|/)|[^/]+/analog(?:$|/)|[^/]+/awstats(?:$|/)|[^/]+/cpbandwidth(?:$|/)|[^/]+/webalizer(?:$|/))