Hourly emails from sympl-filesystem-security (Was: Houston we have a problem!)

Ahoy there,
Output/email below is being sent to root after a clean install of Sympl on Debian 10. Anyone else receiving this output?
Rgds Pete

/etc/cron.hourly/sympl-filesystem-security:
chown sympl:sympl /etc/sympl
chown sympl:sympl /etc/sympl/ssl-hooks.d
chown sympl:sympl /etc/sympl/test.d
chown sympl:sympl /etc/sympl/monit.d
chown sympl:sympl /etc/sympl/backup.d
chown sympl:sympl /etc/sympl/backup.d/Makefile
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/30-clear-orphans
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/06-enable-lock
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/00-check-root
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/05-check-availspace
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/.empty
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/04-disable-lock
chown sympl:sympl /etc/sympl/backup.d/post-backup.d
chown sympl:sympl /etc/sympl/backup.d/post-backup.d/.empty
chown sympl:sympl /etc/sympl/backup.d/README
chown sympl:sympl /etc/sympl/backup.d/conf.d
chown sympl:sympl /etc/sympl/backup.d/conf.d/00-header.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/30-actions.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/10-directories.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/99-footer.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/40-misc.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/20-variables.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/50-drivers.conf
chown sympl:sympl /etc/sympl/backup.d/backup2l.conf
chown sympl:sympl /etc/sympl/dns.d
chown sympl:sympl /etc/sympl/dns.d/tinydns.template.erb
chown sympl:sympl /etc/sympl/apache.d
chown sympl:sympl /etc/sympl/apache.d/non_ssl.template.erb
chown sympl:sympl /etc/sympl/apache.d/ssl.template.erb
chown sympl:sympl /etc/sympl/apache.d/webalizer.conf.erb
chown sympl:sympl /etc/sympl/apache.d/zz-mass-hosting.template.erb
chown sympl:sympl /etc/sympl/apache.d/zz-mass-hosting.ssl.template.erb

Environment

  • Sympl Version [9.0/10.0]:
  • Sympl Testing Version? [No]
  • Debian Version [Buster]:
  • Hardware Type? [Virtual]
  • Hosted On? [Bytemark]

Update:

So just to mitigate human error I’ve since formatted, reloaded Debian 10 and re-installed Sympl.
The machine is still grumbling about file system security every hour. I was about to begin using the machine as a production server but I think I’ll hold off until Sympl has matured a little.

Rgds Pete

I did a fresh install on Brightbox and it ‘just worked’. I’m now using it as my main production server with no problems so far… Touch wood!

There must be a reason why you are getting this problem but others are not.
I have a production server running Sympl + Debian 10 on a Bitfolk VPS with no problems.

Not seen that in at least a dozen installations. I’d wipe it and try again, if possible.

I’m receiving the worrying message below with brand new Symp installations on both Debian 9 & 10

/etc/cron.hourly/sympl-filesystem-security:
chown sympl:sympl /etc/sympl
chown sympl:sympl /etc/sympl/ssl-hooks.d
chown sympl:sympl /etc/sympl/test.d
chown sympl:sympl /etc/sympl/monit.d
chown sympl:sympl /etc/sympl/backup.d
chown sympl:sympl /etc/sympl/backup.d/Makefile
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/30-clear-orphans
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/06-enable-lock
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/00-check-root
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/05-check-availspace
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/.empty
chown sympl:sympl /etc/sympl/backup.d/pre-backup.d/04-disable-lock
chown sympl:sympl /etc/sympl/backup.d/post-backup.d
chown sympl:sympl /etc/sympl/backup.d/post-backup.d/.empty
chown sympl:sympl /etc/sympl/backup.d/README
chown sympl:sympl /etc/sympl/backup.d/conf.d
chown sympl:sympl /etc/sympl/backup.d/conf.d/00-header.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/30-actions.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/10-directories.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/99-footer.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/40-misc.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/20-variables.conf
chown sympl:sympl /etc/sympl/backup.d/conf.d/50-drivers.conf
chown sympl:sympl /etc/sympl/backup.d/backup2l.conf
chown sympl:sympl /etc/sympl/dns.d
chown sympl:sympl /etc/sympl/dns.d/tinydns.template.erb
chown sympl:sympl /etc/sympl/apache.d
chown sympl:sympl /etc/sympl/apache.d/non_ssl.template.erb
chown sympl:sympl /etc/sympl/apache.d/ssl.template.erb
chown sympl:sympl /etc/sympl/apache.d/webalizer.conf.erb
chown sympl:sympl /etc/sympl/apache.d/zz-mass-hosting.template.erb
chown sympl:sympl /etc/sympl/apache.d/zz-mass-hosting.ssl.template.erb

Are you seeing it more than once (ie: hourly), or just on initial install?

The worrying messages are being sent hourly without fail. Last night I installed Sympl on:

  1. Bytemark cloud server running Debian stretch
  2. Bytemark cloud server running Debian buster

Both machines are sending the same hourly Sympl file system security message.

Can you check (possibly by another carefully time cron job) what the ownership and permissions for those files are just before sympl-filesystem-security decides it needs to change them?

The implications are bizarre, but as a sanity check I’d try setting it up on a server that’s not Bytemark (anyone who can provide a VPS charged per hour or free for a limited time would do.)

I’ve found the bug - theres some debug code still there which has de-fanged sympl-filesystem-security a little, so rather than make the changes, it’s outputting what it should do.

A fix is being built now, and will be live in the next couple of hours.

@compassweb You should be okay to run sympl update now on any affected systems, and it should quieten down.

Paul,
Thank you very much indeed for your timely response to this issue. Sympl now seems to be running without issue and I’ve began hosting live web services. Your Sympl development work is most appreciated.
Regards - Pete