Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

nobody-owned files don't count towards quota?

Discussion in 'General Discussion' started by astopy, Jul 6, 2011.

  1. astopy

    astopy Well-Known Member

    Joined:
    Apr 3, 2003
    Messages:
    166
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    Root Administrator
    I've just noticed that an account which we transferred from a different company's server has several GB of files which were owned by nobody, and which weren't being counted towards the user's quota. I'm guessing the other company didn't use suPHP and these files were uploaded through a PHP script, and after chowning them to the right user the disk usage in WHM is right.

    It would be useful if cPanel automatically detected files in public_html which are owned by nobody and added them to the disk usage, or perhaps just chown them (of course leaving the group permissions set so that nobody can still write to the files, just in case).
     
    #1 astopy, Jul 6, 2011
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Files that aren't owned by the user will not be counted toward the disk space, that is correct.

    Of note, cPanel wouldn't automatically chown files to a user if the file might need to be owned by nobody for some purpose under a system using DSO. Changing ownership for files can be very dangerous, especially if it were automated in that manner.

    If you do feel this is a request that you would like to see implemented; however, we have a feature request forum at this location to post the idea:

    Feature Requests for cPanel and WHM
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelTristan, Jul 7, 2011
  3. kazar

    kazar Active Member

    Joined:
    May 18, 2008
    Messages:
    27
    Likes Received:
    0
    Trophy Points:
    51
    Location:
    NYC/Earth
    cPanel Access Level:
    Root Administrator
    Hmmm. I could see where this could be a problem when accounts are hosting Drupal sites, because the classic instructions for securing sites/default/files directory & contents is to chown to nobody. This would mean, if the site is set up to use Drupal's public file system (which is the default) that image uploads by users -- i.e., the heftiest of all, are not counting towards the accounts quotas. Unless I misunderstand the above answer.
     
    #3 kazar, Jul 9, 2011
  4. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    You aren't securing files by chowning them to nobody under suPHP. If you are using suPHP, you will be breaking sites to chown them to the nobody user for group ownership. Additionally, cPanel cannot auto chown files on a user's account without possible security issues being caused (if a file were a hardlink to a root file, then that root-owned file would become owned by the user at that point).

    Please post a feature request as I mentioned if this is something that is being requested to count nobody owned files on a user's account as part of the disk quota. The only PHP handler that currently will have files owned by nobody is DSO.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelTristan, Jul 11, 2011
  5. zgia

    zgia Member

    Joined:
    Jul 8, 2004
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    151
    Hello,
    We have also issue with "nobody".
    Does cPanel have option to restore owner from nobody to user without "root"?
    But from cPanel File Manager or other methods.

    Our clients use different CMS that uploading files and creating dirs, than clients could not change anything with this dirs.
    Them contacting to us and we do chown manualy.

    For example this option have panel DA(Dire**Admin)

    I searched forum and All Documentation but did not found.
    Thanks.
     
    #5 zgia, Dec 6, 2011
  6. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    We do have a script at /usr/local/cpanel/scripts/chownpublichtmls that will chown /home/username/public_html to the right ownership permissions. This will actually perform a chown for all accounts rather than just 1 account.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelTristan, Dec 6, 2011
  7. zgia

    zgia Member

    Joined:
    Jul 8, 2004
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    151
    We know about this script, but problem in another manner. For example clients`s script created files and directories, but client can not do with this files/dirs from Cpanel or ftp anything(modify, delete, etc) until contact us. We can add this script "chownpublichtmls " to cron, but it is not a resolution of problem.
     
    #7 zgia, Dec 6, 2011
  8. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    If you believe there is an option we need to provide for the end user in File Manager or cPanel, please feel free to open up a feature request for that option:

    http://go.cpanel.net/iwant

    This is how things are added to the product that do not already exist.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelTristan, Dec 6, 2011
  9. garrettp

    garrettp Well-Known Member
    PartnerNOC

    Joined:
    Jun 18, 2004
    Messages:
    312
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    DataCenter Provider
    Run SuPHP (or other CGI-based loader), end of story. Running around chmod'ing everything to 777 to allow Drupal/Joomla/WP/etc to work is just a bad idea. Nobody-owned files are problematic any way you hash it and should be avoided.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #9 garrettp, Dec 6, 2011
  10. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,582
    Likes Received:
    439
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Agreed 110%.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #10 Infopro, Dec 6, 2011
(You must log in or sign up to post here.)
Loading...
Similar Threads - nobody owned files
  1. mathuaerknedam

    Domain owned by nobody user

    mathuaerknedam, Mar 14, 2017, in forum: Bind/DNS/Nameserver
    Replies:
    1
    Views:
    1,604
    cPanelMichael
    Mar 14, 2017
  2. mythosis

    Nobody High CPU HTTPD

    mythosis, Jul 25, 2018, in forum: EasyApache
    Replies:
    5
    Views:
    404
    cPanelMichael
    Jul 31, 2018
  3. psm

    Nobody user taking up 300% CPU?

    psm, Jun 21, 2018, in forum: Security
    Replies:
    4
    Views:
    221
    cPanelMichael
    Jun 22, 2018
  4. The Emperor

    The server’s hostname conflicts with domain ownership for the user “nobody”

    The Emperor, Jun 4, 2018, in forum: Bind/DNS/Nameserver
    Replies:
    14
    Views:
    537
    cPanelLauren
    Jun 11, 2018
  5. rangka_kacang

    unable to delete nobody hostname autossl

    rangka_kacang, Jan 31, 2018, in forum: General Discussion
    Replies:
    2
    Views:
    311
    rangka_kacang
    Jan 31, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice