Make option to disable symlink creation during rearrange account
When you rearrange an account, the system creates a symlink in the old location (usually /home) pointing to the new location (like /home2). The only purpose of this symlink is to prevent scripts from breaking that were hard coded to the old location. If you create a brand new account in a secondary location, it does not create a symlink in /home pointing to /home2 because the account was never in /home to being with, and there is no reason to believe that /home would have been hard coded in any of their scripts.
So, that all makes sense.
However, for accounts that use cron or have the php or apache jail protection (keeps users inside their own folder), having the old locations hard coded in the scripts will break the scripts regardless of the symlink because that old location, even symlinked to the new location, is considered to be outside of their jailed location so they get access denied.
That also makes sense, but because of that, the symlinks really are not useful and they do not prevent scripts from breaking when moving accounts... and if an account gets moved multiple times, for whatever reason, you get symlinks scattered everywhere (/home/user pointing to /home2/user pointing to /home3/user).
So, if there was an option to completely disable the symlink creation, it would have the benefit of keeping a cleaner/neater /home folders, and it wouldn't really hurt anything since cron and the jailed apache/php doesn't work with symlinks anyway.
I haven't tested outside cagefs recently but everything keeps working even with cron on our servers (we had to add a ligne to cagefs so it included the symlinks to get this working but it does work for us.
I haven't tested outside cagefs recently but everything keeps working even with cron on our servers (we had to add a ligne to cagefs so it included the symlinks to get this working but it does work for us.
ROOT USER CAN ACCESS SYMLINKS TO AN ACCOUNT:
JAILED USER CANNOT ACCESS SYMLINKS TO AN ACCOUNT:
ROOT USER CAN ACCESS SYMLINKS TO AN ACCOUNT:
JAILED USER CANNOT ACCESS SYMLINKS TO AN ACCOUNT:
https://forums.cpanel.net/threads/jailshell-question-with-multiple-home-folders.548671/
[quote=cPanelMichael]
Hello,Thank you for providing the steps to reproduce the issue. I've confirmed the same result. This is by design for the jailed shell environment. You will need to assign the account regular shell access to circumvent this limitation.Thank you.
[/quote]
https://forums.cpanel.net/threads/jailshell-question-with-multiple-home-folders.548671/
[quote=cPanelMichael]
Hello,Thank you for providing the steps to reproduce the issue. I've confirmed the same result. This is by design for the jailed shell environment. You will need to assign the account regular shell access to circumvent this limitation.Thank you.
[/quote]
Replies have been locked on this page!