Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SOLVED What is proper Group and perms /ssl/domain_tls/

Discussion in 'Security' started by ottdev, Feb 25, 2018.

  1. ottdev

    ottdev Well-Known Member

    Joined:
    Oct 1, 2013
    Messages:
    104
    Likes Received:
    3
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    I suspect this "mem" group is incorrect ???
    Code:
    # ls -l /var/cpanel/ssl/domain_tls/*/|grep combined
    -rw-r----- 1 root mem  7462 Feb 23 00:37 combined
    -rw-r----- 1 root mem  7499 Feb 24 00:35 combined
    -rw-r----- 1 root mem  7673 Feb 23 00:37 combined
    Investigating Exim crash and have found many mail related files for group "mem" instead of group "mail" (as I have compared on other servers).

    I don't have a server to compare for these "domain_tls" ...
    CAN SOMEONE PLEASE spare a minute and see if this is right or what are the proper values for owner, group, permissions on any that are incorrect ?

    Code:
    ls -l /var/cpanel|grep ssl
    -rw-------  1 root     root                 41 Apr  4  2017 autossl.json
    -rw-------  1 root     root              98304 Feb 25 00:28 autossl_problems.sqlite
    -rw-------  1 root     root              65536 Feb 24 00:35 autossl_queue_cpanel.sqlite
    drwxr-xr-x 11 root     root               4096 Feb 25 04:44 ssl
    
    #  ls -l /var/cpanel/ssl|grep domain_tls
    drwx--x--x 83 root root 4096 Feb 24 00:35 domain_tls
    
    #  ls -l /var/cpanel/ssl/domain_tls
    total 320
    drwxr-xr-x 2 root root 4096 Feb 23 00:37 sub.domain.tld
    drwxr-xr-x 2 root root 4096 Feb 24 00:35 sub1.domain2.tld
    drwxr-xr-x 2 root root 4096 Feb 23 00:37 domain3.tld
    
    ls -l /var/cpanel/ssl/domain_tls/*/|grep combined
    -rw-r----- 1 root mem  7462 Feb 23 00:37 combined
    -rw-r----- 1 root mem  7499 Feb 24 00:35 combined
    -rw-r----- 1 root mem  7673 Feb 23 00:37 combined
    
     
  2. ottdev

    ottdev Well-Known Member

    Joined:
    Oct 1, 2013
    Messages:
    104
    Likes Received:
    3
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Also these (AT LEFT of image) - Are the right side ones correct ?

    As well the .cabundle, .crt, and .key are all group "mem"..
    should they all be
    640 root:mail .cabundle
    644 root:mail .crt
    640 root:mail .key
     

    Attached Files:

  3. ottdev

    ottdev Well-Known Member

    Joined:
    Oct 1, 2013
    Messages:
    104
    Likes Received:
    3
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Solved! Yes, all of those group "mem" were "mail" the day before as well.
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,182
    Likes Received:
    1,756
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    I'm glad to see you were able to confirm the correct ownership values. Thank you for updating us with the outcome.
     
Loading...

Share This Page