Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Symlink Race Condition Protection and apache Alias

Discussion in 'EasyApache' started by Eli L, May 11, 2013.

  1. Eli L

    Eli L Well-Known Member

    Joined:
    Aug 9, 2007
    Messages:
    61
    Likes Received:
    1
    Trophy Points:
    58
    Location:
    Bellingham, Washington, United States
    cPanel Access Level:
    Root Administrator
    I've had to enable the Symlink Race Condition Protection option when compiling apache but since doing that I am no longer able to use my global custom error pages on my server.

    I have set it up to use the following, for example:
    Alias /404.shtml /usr/local/cpanel/sys_cpanel/custom404.shtml

    Is there a workaround for this problem?

    Thanks
     
    #1 Eli L, May 11, 2013
  2. Eli L

    Eli L Well-Known Member

    Joined:
    Aug 9, 2007
    Messages:
    61
    Likes Received:
    1
    Trophy Points:
    58
    Location:
    Bellingham, Washington, United States
    cPanel Access Level:
    Root Administrator
    Been 10 days. Im going to Bump this.
     
    #2 Eli L, May 21, 2013
  3. cPanelKurtN

    cPanelKurtN Well-Known Member
    Staff Member

    Joined:
    Jan 29, 2013
    Messages:
    95
    Likes Received:
    1
    Trophy Points:
    83
    cPanel Access Level:
    Root Administrator
    Hi Eli L,

    Sorry about the delayed response. To answer your question directly, no, not as it stands now.
    The Symlink Protection patch prohibits static files from being accessed if they aren't owned by the virtual host user.

    The important part to this response is, "static files". This means, if you pass the files through an alternative Content Handler (e.g. php, cgi, etc), then you _should_ be able to get around this issue. Unfortunately, there are trade-offs to this decision, namely speed and resources.
     
    #3 cPanelKurtN, Jun 27, 2013
(You must log in or sign up to post here.)
Loading...
Similar Threads - Symlink Race Condition
  1. LordLiverpool

    Symlink Race Condition Protection

    LordLiverpool, May 9, 2017, in forum: Security
    Replies:
    3
    Views:
    382
    Jaison V John
    May 24, 2017
  2. PCZero

    SOLVED Symlink Race Condition Protection

    PCZero, Nov 30, 2016, in forum: Security
    Replies:
    6
    Views:
    1,606
    cPanelMichael
    Dec 5, 2016
  3. Wiched

    Symlink race condition protection

    Wiched, May 12, 2016, in forum: Security
    Replies:
    2
    Views:
    849
    cPanelMichael
    Jun 20, 2016
  4. shenzy

    mod_ruid2 + jailshell and Bluehost provided patch for symlink race condition

    shenzy, Apr 10, 2016, in forum: Security
    Replies:
    2
    Views:
    895
    shenzy
    Apr 11, 2016
  5. hicom

    Symlink Race Protection - EA4

    hicom, Sep 30, 2016, in forum: EasyApache
    Replies:
    5
    Views:
    652
    cPanelMichael
    Nov 7, 2016

Share This Page