[GH-ISSUE #2659] [Feature Request]Ownership Permissions Check- Disable on per folder basis #1926

Closed
opened 2026-02-27 02:59:50 +03:00 by kerem · 3 comments
Owner

Originally created by @WorthlessJ on GitHub (Dec 18, 2019).
Original GitHub issue: https://github.com/GameServerManagers/LinuxGSM/issues/2659

I would like to be able to disable ownership checks on a per-folder basis. This would allow users to link multiple servers to one common folder and save on storage space.

In my specific case I have 6KF2+4sven different servers running the same maps, and each server has it's own folder of custom maps. This change would allow me to save ~200gb of storage space.

I understand that this can be worked around by having every server under one user, and/or instancing servers, however I would prefer to keep each server with it's own user.

It would be nice if this feature functioned like stats="on" and could simply be added to the lgsm config file.

Example variable:

disable_p_check="/home/kf2maps/"

Originally created by @WorthlessJ on GitHub (Dec 18, 2019). Original GitHub issue: https://github.com/GameServerManagers/LinuxGSM/issues/2659 I would like to be able to disable ownership checks on a per-folder basis. This would allow users to link multiple servers to one common folder and save on storage space. In my specific case I have 6KF2+4sven different servers running the same maps, and each server has it's own folder of custom maps. This change would allow me to save ~200gb of storage space. I understand that this can be worked around by having every server under one user, and/or instancing servers, however I would prefer to keep each server with it's own user. It would be nice if this feature functioned like stats="on" and could simply be added to the lgsm config file. Example variable: disable_p_check="/home/kf2maps/"
kerem 2026-02-27 02:59:50 +03:00
Author
Owner

@issue-label-bot[bot] commented on GitHub (Dec 18, 2019):

Issue-Label Bot is automatically applying the label type: feature request to this issue, with a confidence of 0.97. Please mark this comment with 👍 or 👎 to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

<!-- gh-comment-id:567186034 --> @issue-label-bot[bot] commented on GitHub (Dec 18, 2019): Issue-Label Bot is automatically applying the label `type: feature request` to this issue, with a confidence of 0.97. Please mark this comment with :thumbsup: or :thumbsdown: to give our bot feedback! Links: [app homepage](https://github.com/marketplace/issue-label-bot), [dashboard](https://mlbot.net/data/GameServerManagers/LinuxGSM) and [code](https://github.com/hamelsmu/MLapp) for this bot.
Author
Owner

@dgibbs64 commented on GitHub (Dec 19, 2019):

@WorthlessJ have you tried symbolic links? It may be possible to use a symbolic link on these custom map dirs. I am unsure if the permissions check would pick up symbolically linked dir or not. Would you be able to try out a symbolic link and see what the outcome is?

Also is there a specific reason you would prefer not the use a single user?

The change you are requesting would require some careful thought to prevent a way of new admins being lazy and bypassing the permissions which could lead to odd issues.

<!-- gh-comment-id:567457812 --> @dgibbs64 commented on GitHub (Dec 19, 2019): @WorthlessJ have you tried symbolic links? It may be possible to use a symbolic link on these custom map dirs. I am unsure if the permissions check would pick up symbolically linked dir or not. Would you be able to try out a symbolic link and see what the outcome is? Also is there a specific reason you would prefer not the use a single user? The change you are requesting would require some careful thought to prevent a way of new admins being lazy and bypassing the permissions which could lead to odd issues.
Author
Owner

@WorthlessJ commented on GitHub (Dec 19, 2019):

@dgibbs64 Thanks for the quick reply on this request!

Short: I have resolved the problem, as per your suggestion with symbolic links by changing my configuration around. I can also confirm symbolic links work, whereas mounts do not.

Original problem: In order to bypass user chroot jailing, I was using mounting instead of symbolic links. While the files were readable they were not owned by the user, and LGSM would recognize this.

Solution: I have changed my jails from /home/user/ to /home/ and disallowed viewing other folders with user:group permissions. My map folders reside in /home/, and have been symbolically linked to. I have not lost any functionality, my jail setup has been simplified, and I have saved storage space. I call this a win.

While I still think this could still be a helpful feature, I understand the reasoning behind not implementing it and find this an acceptable workaround. I do think the permissions aspect is one of the best features of LGSM and probably curbs countless support requests.

Why I have a user per server: Ease of use, security and futureproofing. Each server can have an individual admin with ssh/sftp access, can have different mods, can manage their own files, etc without touching other servers. Symlinking or mounting goes against this, but the storage savings are large, and the way Sven and KF2 handle custom content, users can still add other custom content in their own directories.

I will close this request now, Cheers.

<!-- gh-comment-id:567508645 --> @WorthlessJ commented on GitHub (Dec 19, 2019): @dgibbs64 Thanks for the quick reply on this request! Short: I have resolved the problem, as per your suggestion with symbolic links by changing my configuration around. I can also confirm symbolic links work, whereas mounts do not. Original problem: In order to bypass user chroot jailing, I was using mounting instead of symbolic links. While the files were readable they were not owned by the user, and LGSM would recognize this. Solution: I have changed my jails from /home/user/ to /home/ and disallowed viewing other folders with user:group permissions. My map folders reside in /home/, and have been symbolically linked to. I have not lost any functionality, my jail setup has been simplified, and I have saved storage space. I call this a win. While I still think this could still be a helpful feature, I understand the reasoning behind not implementing it and find this an acceptable workaround. I do think the permissions aspect is one of the best features of LGSM and probably curbs countless support requests. Why I have a user per server: Ease of use, security and futureproofing. Each server can have an individual admin with ssh/sftp access, can have different mods, can manage their own files, etc without touching other servers. Symlinking or mounting goes against this, but the storage savings are large, and the way Sven and KF2 handle custom content, users can still add other custom content in their own directories. I will close this request now, Cheers.
Sign in to join this conversation.
No labels
Atomic
Epic
cannot reproduce
command: backup
command: console
command: debug
command: details
command: fast-dl
command: install
command: mods
command: monitor
command: post-details
command: restart
command: send
command: start
command: stop
command: update
command: update-lgsm
command: validate
command: wipe
distro: AlmaLinux
distro: Arch Linux
distro: CentOS
distro: Debian
distro: Fedora
distro: RedHat
distro: Rocky Linux
distro: Ubuntu
distro: openSUSE
engine: goldsrc
engine: source
game: 7 Days to Die
game: ARMA 3
game: Ark: Survival Evolved
game: Assetto Corsa
game: Avorion
game: BATTALION: Legacy
game: Barotrauma
game: Battalion 1944
game: Battlefield 1942
game: Black Mesa: Deathmatch
game: Blade Symphony
game: Call of Duty 2
game: Call of Duty 4
game: Call of Duty: United Offensive
game: Counter-Strike 1.6
game: Counter-Strike 2
game: Counter-Strike: Global Offensive
game: Counter-Strike: Source
game: Day of Infamy
game: Dayz
game: Death Match Classic
game: Don't Starve Together
game: ET: Legacy
game: Eco
game: Factorio
game: Factorio
game: Garry's Mod
game: Half-Life
game: Hurtword
game: Insurgecy
game: Insurgecy
game: Insurgency: Sandstorm
game: Just Cause 3
game: Killing Floor
game: Killing Floor 2
game: Left 4 Dead 2
game: Minecraft
game: Minecraft Bedrock
game: Mordhau
game: Multi Theft Auto
game: Mumble
game: Natural Selection 2
game: No More Room in Hell
game: Pavlov VR
game: Post Scriptum
game: Project Zomboid
game: Quake 3
game: QuakeWorld
game: Red Orchestra: Ostfront 41-45
game: Return to Castle Wolfenstein
game: Rising World
game: Rust
game: San Andreas Multiplayer
game: Satisfactory
game: Soldat
game: Soldier of Fortune 2
game: Squad
game: Squad 44
game: Starbound
game: Stationeers
game: Sven Co-op
game: Team Fortress 2
game: Teamspeak 3
game: Teeworlds
game: Terraria
game: The Front
game: Unreal Tournament 2004
game: Unreal Tournament 3
game: Unreal Tournament 99
game: Unturned
game: Valheim
game: Wurm Unlimited
game: Zombie Master Reborn
game: label missing
good first issue
help wanted
info: alerts
info: dependency
info: docker
info: docs
info: email
info: query
info: steamcmd
info: systemd
info: tmux
info: website
info: website
needs more info
outcome: duplicate
outcome: issue resolved
outcome: issue resolved
outcome: issue unresolved
outcome: pr accepted
outcome: pr rejected
outcome: unconfirmed
outcome: wontfix
outcome: wrong forum
potential-duplicate
priority
pull-request
type: bug
type: feature
type: feature
type: feature request
type: game server request
type: refactor
waiting response
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/LinuxGSM#1926
No description provided.