Plesk Repair Kit provides warnings about incorrect permissions on /var/www/vhosts/system/example.com/logs directory on a daily basis with LiteSpeed enabled

Renan Poss Moreira

Updated February 01, 2024 15:26

kb: bug Plesk for Linux

Applicable to:

Plesk for Linux

Symptoms

Tools & Settings > Diagnose & Repair tool provides the warnings below on a daily basis when checking 'File System' aspect for all domains:

PLESK_WARN: There are incorrect permissions on some items in the system directory for the domain 'example.com'.
After fixing permissions, the error returns back and the same warnings appear in the Diagnose & Repair tool.
When executing the plesk repair fs command on the server it becomes clear that incorrect permissions are set to the logs directory:

# plesk repair fs example.com -v
Checking virtual hosts' file system
There are incorrect permissions on some items in the system directory for the domain 'example.com' ................. [ERROR]
Inorrect permissions on /var/www/vhosts/system/example.com/logs:
expected is one of 0700, actual is 0701
Litespeed extension is installed on the server.

When using the auditd package to define the reason for changing permissions on the server with the auditctl -w /var/www/vhosts/system/example.com/logs -p a -k chmod_logs rule enabled, the following record can be found:

CONFIG_TEXT: type=PROCTITLE msg=audit(1602465156.649:4638892): proctitle="litespeed"
type=PATH msg=audit(1602465156.649:4638892): item=0 name="/var/www/vhosts/system/example.com/logs" inode=6422598 dev=08:21 mode=040701 ouid=997 ogid=0 rdev=00:00 objtype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1602465156.649:4638892): cwd="/tmp/lshttpd"
type=SYSCALL msg=audit(1602465156.649:4638892): arch=c000003e syscall=90 per=400000 success=yes exit=0 a0=7ffc2f0ef640 a1=1c1 a2=8 a3=7f2791308790 items=1 ppid=1 pid=1330346 auid=4294967295 uid=0 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=4294967295 comm="litespeed" exe="/usr/local/lsws/bin/lshttpd.5.4.10" key="chmod_logs"

Note: syscall=90 equals chmod: https://filippo.io/linux-syscall-table

Cause

LiteSpeed extension changes permissions on the logs directory of the domain on a daily basis due to its requirements. Plesk Repait Kit detects such permissions as incorrect due to the fact that with Apache and/or nginx 700 permissions are used.

Such behavior was considered a bug with ID PPPM-13138. Plesk Repair Kit should ignore 701 permissions to the logs directory when LiteSpeed is enabled.

Resolution

Warnings in Tools & Settings > Diagnose & Repair regarding inorrect permissions on /var/www/vhosts/system/example.com/logs can be safely ignored.