After update: Symbolic link not allowed or link target not accessible: /var/www/...

[kevinbentlage]

Hi Guys,

Today I updated several DA boxes with custombuild to the latest versions, and on one single box I can't access http://servername.domain.tld/roundcube and http://servername.domain.tld/phpmyadmin anymore.

The following errors pop up in apache error log:

[Fri Feb 03 21:38:16.470008 2017] [core:error] [pid 45421] [client 88.159.206.135:52348] AH00037: Symbolic link not allowed or link target not accessible: /var/www/html/roundcube

[Fri Feb 03 21:40:40.418745 2017] [core:error] [pid 46085] [client 88.159.206.135:52383] AH00037: Symbolic link not allowed or link target not accessible: /var/www/html/phpMyAdmin

The permissions of all folders in /var/www/html are the same as on other servers (that work nicely):

[root@shared01 html]# ll /var/www/html
total 20
-rw-r--r-- 1 root root 44 Feb 3 21:37 index.html
lrwxrwxrwx 1 webapps webapps 44 Feb 3 19:56 phpMyAdmin -> /var/www/html/phpMyAdmin-4.6.6-all-languages
drwxr-xr-x 13 webapps webapps 4096 Feb 3 19:56 phpMyAdmin-4.6.6-all-languages
-rwxr-xr-x. 1 webapps webapps 68 Jun 7 2016 redirect.php
lrwxrwxrwx 1 webapps webapps 19 Feb 3 19:56 roundcube -> roundcubemail-1.2.3
drwxr-xr-x 12 webapps webapps 4096 Feb 3 19:56 roundcubemail-1.2.3

[root@shared01 extra]# cat /etc/httpd/conf/extra/httpd-hostname.conf

<Directory /var/www/html>
	Options +SymLinksIfOwnerMatch +IncludesNoExec -Indexes
	AllowOverride AuthConfig FileInfo Indexes Limit Options=Includes,IncludesNOEXEC,Indexes,ExecCGI,MultiViews,SymLinksIfOwnerMatch,None

	Order allow,deny
	Allow from all
	<IfModule mod_suphp.c>
		suPHP_Engine On
		suPHP_UserGroup webapps webapps
	</IfModule>
	<IfModule mod_ruid2.c>
		RUidGid webapps webapps
	</IfModule>
	<IfModule mod_lsapi.c>
		lsapi_user_group webapps webapps
	</IfModule>
	<IfModule mod_php5.c>
		php_admin_value session.save_path /var/www/tmp
		php_admin_value upload_tmp_dir /var/www/tmp
	</IfModule>
  <IfModule mod_php7.c>
          php_admin_value session.save_path /var/www/tmp
          php_admin_value upload_tmp_dir /var/www/tmp
  </IfModule>
</Directory>
<Directory /var/www/html/phpMyAdmin/log>
	Require all denied
</Directory>

All config's are the same on all servers, but only this box causes problems.

When i access /webmail on a random website e.g. http://www.website.tld/webmail it works! Only servername.tld/webmail don't.

What could this be?

Thanks.

 

[Hosting Kernel]

What OS are you using ?

 

[kevinbentlage]

CloudLinux 7.

 

[Hosting Kernel]

try disable Symlink Protection:
http://docs.cloudlinux.com/index.html?symlink_owner_match_protection.html