shadowdaoandClaude Opus 5.5 86a88c87db fix(safe-paths): unlink planted symlinks as the customer, then fail closed ...

Root rm -f in drop_symlink could be redirected by a parent-directory swap to
delete arbitrary files as root. drop_symlink and the logs/ symlink sweep now
unlink AS THE CUSTOMER (can never delete anything the customer couldn't), and
drop_symlink still refuses to start if the path is a symlink afterwards; the
pre-daemon logs/ gate re-checks and fails closed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-20 16:06:41 -07:00

..

tests

fix(lsphp): correct the SIGPIPE explanation, drop the temp-dir boot precondition, close two scanner blind spots

2026-08-05 16:03:08 -07:00

cac-lsphp-normalize.php

feat(cac-lsphp): guarantee $_SERVER path parity via a PHP extension

2026-08-05 11:38:19 -07:00

create-apache-mpm-config.sh

Optimize Apache & PHP-FPM memory for lower idle usage

2026-02-25 18:52:15 -08:00

create-php-config.sh

Fix DOCUMENT_ROOT for PHP-FPM in shared httpd mode

2026-04-01 13:04:53 -07:00

create-vhost-litespeed.sh

refactor(litespeed): drop setUIDMode for shared lsphp + cut opcache 128→32M

2026-06-02 20:06:56 -07:00

create-vhost.sh

Adding better backups and log rotation, and updating files around it

2024-10-14 19:30:51 -07:00

detect-memory-litespeed.sh

tune(litespeed): bump LSPHP_WORKER_ESTIMATE_MB 115 → 130

2026-06-02 18:54:28 -07:00

detect-memory-lsphp.sh

feat(cac-lsphp): detached lsphp (LSAPI) site image for the shared-ols tier

2026-06-09 18:28:34 -07:00

detect-memory.sh

detect-memory: raise PHP_WORKER_ESTIMATE_MB default 60→128

2026-06-01 08:23:09 -07:00

entrypoint-fpm.sh

fix(safe-paths): fail closed on planted symlinks before root daemons start

2026-10-20 16:04:21 -07:00

entrypoint-litespeed.sh

fix(lsphp): correct the SIGPIPE explanation, drop the temp-dir boot precondition, close two scanner blind spots

2026-08-05 16:03:08 -07:00

entrypoint-lsphp.sh

fix(lsphp): set LSAPI_KEEP_LISTEN=2 to stop idle-exit timing from following the leaked busy counter

2026-08-13 14:47:08 -07:00

entrypoint-shared-httpd.sh

fix(entrypoint): graceful docker stop + cac-fpm error_log owner on first start

2026-10-20 15:44:14 -07:00

entrypoint-shared-ols.sh

fix(ols): scope the htaccess watcher to docroots, stop lswsctrl status log spam

2026-08-13 21:29:48 -07:00

entrypoint.sh

fix(safe-paths): fail closed on planted symlinks before root daemons start

2026-10-20 16:04:21 -07:00

healthcheck-lsphp.sh

feat(cac-lsphp): detached lsphp (LSAPI) site image for the shared-ols tier

2026-06-09 18:28:34 -07:00

install-lscache-wp.sh

Add cac-litespeed image family (OpenLiteSpeed, native LSAPI)

2026-06-02 07:32:47 -07:00

install-php74.sh

Add PostgreSQL support for all PHP versions

2025-07-28 07:27:39 -07:00

install-php80.sh

Add PostgreSQL support for all PHP versions

2025-07-28 07:27:39 -07:00

install-php81.sh

Remove php-ioncube-loader from PHP 8.1 to fix Composer installation

2025-08-12 16:41:33 -07:00

install-php82.sh

Add PostgreSQL support for all PHP versions

2025-07-28 07:27:39 -07:00

install-php83.sh

Add PostgreSQL support for all PHP versions

2025-07-28 07:27:39 -07:00

install-php84.sh

Add PostgreSQL support for all PHP versions

2025-07-28 07:27:39 -07:00

install-php85.sh

Adding support for PHP 8.5

2026-02-08 07:57:04 -08:00

log-rotate.sh

Adding better backups and log rotation, and updating files around it

2024-10-14 19:30:51 -07:00

mysql-backup.sh

Adding better backups and log rotation, and updating files around it

2024-10-14 19:30:51 -07:00

ols-htaccess-watcher.sh

fix(ols): scope the htaccess watcher to docroots, stop lswsctrl status log spam

2026-08-13 21:29:48 -07:00

render-shared-ols-config.sh

fix(lsphp): correct the SIGPIPE explanation, drop the temp-dir boot precondition, close two scanner blind spots

2026-08-05 16:03:08 -07:00

safe-paths.sh

fix(safe-paths): unlink planted symlinks as the customer, then fail closed

2026-10-20 16:06:41 -07:00

stop-services.sh

fix(entrypoint): graceful docker stop + cac-fpm error_log owner on first start

2026-10-20 15:44:14 -07:00

tune-mpm.sh

Add shared httpd + PHP-FPM-only container architecture

2026-04-01 10:08:00 -07:00