Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED What is proper Group and perms /ssl/domain_tls/

Discussion in 'Security' started by ottdev, Feb 25, 2018.

  1. ottdev

    ottdev Well-Known Member

    Joined:
    Oct 1, 2013
    Messages:
    106
    Likes Received:
    3
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    I suspect this "mem" group is incorrect ???
    Code:
    # ls -l /var/cpanel/ssl/domain_tls/*/|grep combined
    -rw-r----- 1 root mem  7462 Feb 23 00:37 combined
    -rw-r----- 1 root mem  7499 Feb 24 00:35 combined
    -rw-r----- 1 root mem  7673 Feb 23 00:37 combined
    Investigating Exim crash and have found many mail related files for group "mem" instead of group "mail" (as I have compared on other servers).

    I don't have a server to compare for these "domain_tls" ...
    CAN SOMEONE PLEASE spare a minute and see if this is right or what are the proper values for owner, group, permissions on any that are incorrect ?

    Code:
    ls -l /var/cpanel|grep ssl
    -rw-------  1 root     root                 41 Apr  4  2017 autossl.json
    -rw-------  1 root     root              98304 Feb 25 00:28 autossl_problems.sqlite
    -rw-------  1 root     root              65536 Feb 24 00:35 autossl_queue_cpanel.sqlite
    drwxr-xr-x 11 root     root               4096 Feb 25 04:44 ssl
    
    #  ls -l /var/cpanel/ssl|grep domain_tls
    drwx--x--x 83 root root 4096 Feb 24 00:35 domain_tls
    
    #  ls -l /var/cpanel/ssl/domain_tls
    total 320
    drwxr-xr-x 2 root root 4096 Feb 23 00:37 sub.domain.tld
    drwxr-xr-x 2 root root 4096 Feb 24 00:35 sub1.domain2.tld
    drwxr-xr-x 2 root root 4096 Feb 23 00:37 domain3.tld
    
    ls -l /var/cpanel/ssl/domain_tls/*/|grep combined
    -rw-r----- 1 root mem  7462 Feb 23 00:37 combined
    -rw-r----- 1 root mem  7499 Feb 24 00:35 combined
    -rw-r----- 1 root mem  7673 Feb 23 00:37 combined
    
     
  2. ottdev

    ottdev Well-Known Member

    Joined:
    Oct 1, 2013
    Messages:
    106
    Likes Received:
    3
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Also these (AT LEFT of image) - Are the right side ones correct ?

    As well the .cabundle, .crt, and .key are all group "mem"..
    should they all be
    640 root:mail .cabundle
    644 root:mail .crt
    640 root:mail .key
     

    Attached Files:

  3. ottdev

    ottdev Well-Known Member

    Joined:
    Oct 1, 2013
    Messages:
    106
    Likes Received:
    3
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Solved! Yes, all of those group "mem" were "mail" the day before as well.
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,870
    Likes Received:
    1,811
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    I'm glad to see you were able to confirm the correct ownership values. Thank you for updating us with the outcome.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice