Thanks for tracking that down. This seems like intended behavior then as the addon domain docroot does get reset to 755 with FileProtect disabled. I created an addon domain on my test server with FileProtect enabled:
drwxr-x--- 3 username nobody 4096 Nov 12 09:48 testperm.com/
and then disabled FileProtect in Tweak Settings:
drwxr-xr-x 4 username username 4096 Nov 12 09:48 testperm.com/
so that's why you're seeing that. Even with FileProtect disabled, it still makes sure the directories are setup properly as outlined in the documentation here:
When you disable this option, EasyApache performs the following actions:
- Sets the user’s /home/username/ directory to 0755 permissions.
- Sets the user’s /home/username/public_html directory Group ID to the username user and 0755 permissions.
The EasyApache FileProtect option improves the security of each user's public_html directory.
docs.cpanel.net
I did look through our documentation and spoke with some other techs, and there doesn't seem to be a way to exclude a directory from FileProtect at this time, so that might be a great feature request to submit.