Applicable to:
- Plesk for Linux
Symptoms
-
Tools & Settings > Diagnose & Repair tool provides the warnings below on a daily basis when checking 'File System' aspect for all domains:
PLESK_WARN: There are incorrect permissions on some items in the system directory for the domain 'example.com'.
-
After fixing permissions, the error returns back and the same warnings appear in the Diagnose & Repair tool.
-
When executing the
plesk repair fscommand on the server it becomes clear that incorrect permissions are set to thelogsdirectory:# plesk repair fs example.com -v
Checking virtual hosts' file system
There are incorrect permissions on some items in the system directory for the domain 'example.com' ................. [ERROR]
Inorrect permissions on /var/www/vhosts/system/example.com/logs:
expected is one of 0700, actual is 0701 -
Litespeed extension is installed on the server.
-
When using the
auditdpackage to define the reason for changing permissions on the server with theauditctl -w /var/www/vhosts/system/example.com/logs -p a -k chmod_logsrule enabled, the following record can be found:CONFIG_TEXT: type=PROCTITLE msg=audit(1602465156.649:4638892): proctitle="litespeed"
type=PATH msg=audit(1602465156.649:4638892): item=0 name="/var/www/vhosts/system/example.com/logs" inode=6422598 dev=08:21 mode=040701 ouid=997 ogid=0 rdev=00:00 objtype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1602465156.649:4638892): cwd="/tmp/lshttpd"
type=SYSCALL msg=audit(1602465156.649:4638892): arch=c000003e syscall=90 per=400000 success=yes exit=0 a0=7ffc2f0ef640 a1=1c1 a2=8 a3=7f2791308790 items=1 ppid=1 pid=1330346 auid=4294967295 uid=0 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="litespeed" exe="/usr/local/lsws/bin/lshttpd.5.4.10" key="chmod_logs"Note: syscall=90 equals chmod: https://filippo.io/linux-syscall-table
Cause
LiteSpeed extension changes permissions on the logs directory of the domain on a daily basis due to its requirements. Plesk Repait Kit detects such permissions as incorrect due to the fact that with Apache and/or nginx 700 permissions are used.
Such behavior was considered a bug with ID PPPM-13138. Plesk Repair Kit should ignore 701 permissions to the logs directory when LiteSpeed is enabled.
Resolution
Warnings in Tools & Settings > Diagnose & Repair regarding inorrect permissions on /var/www/vhosts/system/example.com/logs can be safely ignored.
Comments
0 comments
Please sign in to leave a comment.