Act like CageFS is disabled

Issue

The message "Act like CageFS is disabled" is displayed in the "/var/log/messages".

Environment

• CloudLinux
• CageFS

Solution

Starting from CageFS v.7.2.0-1, you can prevent a process from working if it can't enter CageFS. The option is disabled by default.

To enable it, run the following commands:

touch /etc/cagefs/fail.on.error
cagefsctl --remount-all (cagefsctl --remount <user>)

To disable it, run the following commands:

rm -f /etc/cagefs/fail.on.error
cagefsctl --remount-all (cagefsctl --remount <user>)

The message “Act like CageFS is disabled” in the /var/log/messages will be displayed regardless the /etc/cagefs/fail.on.error file is available or not.

Cause

Explanation using PHP Selector as an example:

The reason for the problem was that when the CageFS is down, for example during a remount, the request that comes to the web server can't enter CageFS and apply PHP Selector settings so it creates a PHP process that uses the default settings. This process can stay alive for a long time, as long as there are calls to the server. The request coming to a web server is unable to enter CageFS and apply PHP Selector settings like PHP version and extensions.

Useful links

• https://docs.cloudlinux.com/shared/cloudlinux_os_components/#preventing-process-from-entering-cagefs-on-error