idcguardian

Registered
Apr 13, 2012
4
0
51
cPanel Access Level
Root Administrator
Hello
I would like to understand why these two accounts ( coXXXXXX and desXXXXX ) are creating these mounting points, sample:

[Removed - Please Attach Images Directly To Threads]

How to remove VirtFS from cPanel (disable and unmount active users) ?

IMPORTANT: No Jailshell enabled:

[[email protected]]# grep coXXXXXX /etc/passwd
coXXXXXX:x:596:594::/home/coXXXXXX :/usr/local/cpanel/bin/noshell

[[email protected] guacmogi]# grep desXXXXX /etc/passwd
desXXXXX:x:702:700::/home/desXXXXX:/usr/local/cpanel/bin/noshell

I tried using the script ( /scripts/clear_orphaned_virtfs_mounts --clearall ), however, the mounting points reappear...

I'm Waiting...

Tks.
Armand
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
Hello,

The following processes may create the jailed shell environment, even if shell access is disabled for an account:
  • Exim processing filters.
  • Piped email addresses.
  • Cron jobs.
  • Jailed Apache virtual hosts that use the mod_ruid2 module via the EXPERIMENTAL: Jail Apache Virtual Hosts using mod_ruid2 and cPanel® jailshell option in WHM's Tweak Settings interface (Home >> Server Configuration >> Tweak Settings).
This is documented at:

VirtFS - Jailed Shell - Documentation - cPanel Documentation

Let us know if you have any additional questions.

Thanks!
 

idcguardian

Registered
Apr 13, 2012
4
0
51
cPanel Access Level
Root Administrator
Hello,
I understood...

However, how I find out what is generating these mount points? There is a log?

I have more 4 servers and I never saw it....

Tks
Armand
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
However, how I find out what is generating these mount points? There is a log?
Hello,

Do any of the accounts with those mounted paths use the services listed in the previous response (e.g. filters, cron jobs)? If so, that's what leading to the VirtFS mounts. This is by design.

Thank you.