/dev/simfs

[PitadaVespa]

Hi,

One of my servers returns the following to a "df" command:

root@xxxxxxx [/]# df
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/simfs 41943040 28666288 13276752 69% /
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/lib
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/sbin
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/opt
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/lib
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/sbin
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/share
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/bin
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/man
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/X11R6
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/kerberos
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/libexec
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/local/bin
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/local/share
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/local/Zend
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/local/IonCube
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/include
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/local/lib
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/var/spool
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/var/lib
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/var/cpanel
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/local/cpanel/Cpanel
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/var/run
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/var/log
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/tmp
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/bin
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/dev
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/usr/local/apache/domlogs
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/etc/mail
/dev/simfs 41943040 28666288 13276752 69% /home/virtfs/joseluis/home/joseluis

I use this command frequently and it's the first time it happens. I noticed it today, after a Cpanel update.
Also, "ls /dev" returns hundreds hundreds of ttyxx.

Does anyone know what caused it and how should I fix it?

Thank you for your help.

Regards,
Luis

[cPanelTristan]

You appear to have enabled Jailed Shell at some point for these users to now all be placed into /home/virtfs. Since virtfs uses hardlinks, each will appear for df checks.

You could disable jailed shell:

VirtFS (Jailed Shell)

Be very very careful if you do this. Please ensure to have off server backups, since again these are hardlinks. Removing the hardlink itself would remove the actual files (so you could end up removing /usr or /var or /etc if you aren't careful).

[PitadaVespa]

You appear to have enabled Jailed Shell at some point for these users to now all be placed into /home/virtfs. Since virtfs uses hardlinks, each will appear for df checks.

You could disable jailed shell:

VirtFS (Jailed Shell)

Be very very careful if you do this. Please ensure to have off server backups, since again these are hardlinks. Removing the hardlink itself would remove the actual files (so you could end up removing /usr or /var or /etc if you aren't careful).

Hi,

Thank you for your answer.
I'm pretty sure I haven't enabled Jailed Shell, at least in the last (several) months, and I'm also pretty sure these hardlinks weren't there a few days before (I regularly check server available disk space).
So, I have no idea what happened...

I manually unmounted those directories and everything is running fine, at least for now.

Thank you for your help.

Regards,
Luis

[cPanelTristan]

Hello Luis,

This path:

/home/virtfs

Indicates jailed shell period. As such, jailed shell had to have been enabled at some point. There's no other explanation for /home/virtfs existing.

Great to hear they aren't appearing any longer.

[PitadaVespa]

Hello Luis,

This path:

/home/virtfs

Indicates jailed shell period. As such, jailed shell had to have been enabled at some point. There's no other explanation for /home/virtfs existing.

Great to hear they aren't appearing any longer.

I guess I didn't explain myself well. I know jailed shell was enabled, once, in the past. But it was a long time ago.

Thank you for your good help.

Regards,
Luis