Here's a fun situation:
A user clearly doesn't understand FTP. They disregard the instructions to upload to /public_html/ and instead connect via FTP and "syncs" their local directory to the remote. Their FTP client removes (because the /home/VIRTMINUSER/ is set with write permission turned on for the VIRTMINUSER on that directory) the /home/VIRTMINUSER/public_html/ and /home/VIRTMINUSER/logs/ directories.
An early morning cron job to rotate logs makes apache reload and erroring out due to DocumentRoot, CustomLog, ErrorLog directories missing. Effectively shutting down the complete web server. DOH!
Since webmin and virtmin uses OS users and doesn't change the /home/VIRTMINUSER/ to something owned by "root:root" like other commercial hosting software (Plesk, Cpanel, etc), this allows the end user to do the above creative task and kill apache.
Has anyone come up with a better solution on the creation of the /home/VIRTMINUSER/ directories instead of the defaults used by Virtualmin -- is there a settings change somewhere?
Or is there a method to stop Virtualmin Pro from creating the new OS account owned by root:root and the /home/VIRTMINUSER/ directory with permissions such as 755?
Your insight would be greatly appreciated.
A solution reply such as "Tell people not to delete /logs/ or /public_html/" I'm afraid doesn't work well because any customer can accidentally delete those two directories and create a Denial of Service.