uadm

Well-Known Member
May 19, 2003
97
0
156
Not sure if this is cloud linux issue or not, but the fact is that our system is cloud linux.

The problem: /opt/suphp/sbin/suphp is deleted. We reinstalled it from /home/cpeasyapache/src/suphp-0 however are a few weeks it's gone again.

We can't find what is causing the file to be deleted.

Anyone else seen this?
 

Jcats

Well-Known Member
PartnerNOC
May 25, 2011
807
160
168
New Jersey
cPanel Access Level
DataCenter Provider
How did you become aware of the issue?

Are you able to see when the problem started, it will most likely show in Apache error log
Code:
# grep suphp /usr/local/apache/logs/error_log
I would try and find when the problem started to see if you can link it to maybe an issue with cPanel update for example, you can see if it occurs around the time the cron runs.
 

uadm

Well-Known Member
May 19, 2003
97
0
156
We get aware of the issue when the sites start to return internal server error.

There's no consistancy in the error start. Once it startd at 23:15, once it started at 09:44.
We checked the crons on the server. Nothing there to even come close to /opt
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,237
463
Hello :)

Is the file regenerated if you rebuild Apache/PHP via EasyApache?

Thank you.
 

uadm

Well-Known Member
May 19, 2003
97
0
156
basically, yes. However we didn't run the entire easyapache process but only make install in /home/cpeasyapache/src/suphp-0 which by it self generated the file.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,237
463

dario2

Member
Sep 21, 2002
12
0
151
Did you ever find out what caused suphp to be deleted? I've just had that happen to me. Your solution with the quick make install was genious, thanks!

That's the first time it's ever happened on one of my servers. It's also my first CentOS 7 server with Cpanel, just sayin'...

Does the Linux audit system track file deletions? It seems to only track reads, writes, appends and executions, not file removal though...

Thanks!