Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Symlink Race Condition Protection and apache Alias

Discussion in 'EasyApache' started by Eli L, May 11, 2013.

  1. Eli L

    Eli L Well-Known Member

    Joined:
    Aug 9, 2007
    Messages:
    61
    Likes Received:
    1
    Trophy Points:
    58
    Location:
    Bellingham, Washington, United States
    cPanel Access Level:
    Root Administrator
    I've had to enable the Symlink Race Condition Protection option when compiling apache but since doing that I am no longer able to use my global custom error pages on my server.

    I have set it up to use the following, for example:
    Alias /404.shtml /usr/local/cpanel/sys_cpanel/custom404.shtml

    Is there a workaround for this problem?

    Thanks
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 Eli L, May 11, 2013
  2. Eli L

    Eli L Well-Known Member

    Joined:
    Aug 9, 2007
    Messages:
    61
    Likes Received:
    1
    Trophy Points:
    58
    Location:
    Bellingham, Washington, United States
    cPanel Access Level:
    Root Administrator
    Been 10 days. Im going to Bump this.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 Eli L, May 21, 2013
  3. cPanelKurtN

    cPanelKurtN Well-Known Member
    Staff Member

    Joined:
    Jan 29, 2013
    Messages:
    95
    Likes Received:
    1
    Trophy Points:
    83
    cPanel Access Level:
    Root Administrator
    Hi Eli L,

    Sorry about the delayed response. To answer your question directly, no, not as it stands now.
    The Symlink Protection patch prohibits static files from being accessed if they aren't owned by the virtual host user.

    The important part to this response is, "static files". This means, if you pass the files through an alternative Content Handler (e.g. php, cgi, etc), then you _should_ be able to get around this issue. Unfortunately, there are trade-offs to this decision, namely speed and resources.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 cPanelKurtN, Jun 27, 2013
(You must log in or sign up to post here.)
Loading...
Similar Threads - Symlink Race Condition
  1. celiac101

    Is Symlink Race Condition Protection Needed on a Non-Shared Server?

    celiac101, May 17, 2018, in forum: Security
    Replies:
    4
    Views:
    122
    celiac101
    May 21, 2018
  2. Skin

    Symlink Race Condition Protection

    Skin, Jan 9, 2018, in forum: Security
    Replies:
    10
    Views:
    404
    cPWilliamL
    Jan 16, 2018
  3. LordLiverpool

    Symlink Race Condition Protection

    LordLiverpool, May 9, 2017, in forum: Security
    Replies:
    3
    Views:
    847
    Jaison V John
    May 24, 2017
  4. PCZero

    SOLVED Symlink Race Condition Protection

    PCZero, Nov 30, 2016, in forum: Security
    Replies:
    6
    Views:
    3,013
    cPanelMichael
    Dec 5, 2016
  5. hicom

    Symlink Race Protection - EA4

    hicom, Sep 30, 2016, in forum: EasyApache
    Replies:
    5
    Views:
    951
    cPanelMichael
    Nov 7, 2016

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice