Symlinked folder not accessible [#408080]

/sites/sitename/files/custom_themes is symlinked to /sites/sitename/themes

In IMCE I have set sites/sitename/files/. as my imce directory.

When I click on custom_themes in imce it says
Directory "custom_themes" is not accessible under file system!

Other directories inside the files folder is accessible. The symlink and those directories have the same permissions and ownership. The /sites/sitename/themes directory has the same permissions and ownership as the other directories.

Is this kind of setup supported? If so where can I start looking?

Comments

Comment #1

ufku CreditAttribution: ufku commented 21 March 2009 at 00:19

IMCE uses Drupal's directory path handling and it resolves paths in order to get the real path. This done to avoid directory exploits using paths like .././
Since your theme path is not under file directory, IMCE won't allow you to reach there.
FYI IMCE works fine with a file directory which is a symlink.

Comment #2

redndahead CreditAttribution: redndahead commented 21 March 2009 at 15:42

Status:

Active

» Fixed

well there went that plan. On to plan b. Thanks.

Comment #3

4 April 2009 at 15:50

Status:

Fixed

» Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

Comment #4

pepeek CreditAttribution: pepeek commented 15 June 2010 at 13:43

What is the plan B? Is there a solution/workarround for it?
Thanks,
--Josef

Comment #5

Bevan CreditAttribution: Bevan commented 15 December 2010 at 03:46

Status:

Closed (fixed)

» Active

Unfortunately moving the directory into the Drupal files directory is not an option for a project I am working on. Short of recursively hard-linking (then synchronising changes), are there other other workarounds, such as a configuration setting or a hack to the module?

(The security issue you describe is not an problem for this project as all users with access to the site are trusted. It's an intranet)

Thank you!

Comment #6

ufku CreditAttribution: ufku commented 15 December 2010 at 06:09

The function used for checking directory location is file_check_location(). You can either hack IMCE to use an alternate function or hack file_check_location() not to use realpath() that resolves symlinks. It's in includes/file.inc