where should fs.protected_symlinks_create be set?

[oceanwave]

Migrating settings from a CL6 server to CL9, I believe I accidentally created the same setting in two places.

I assume I should have only 1 of the following not both -- is that correct, and if so, which one is the correct CL9 location to specify this?

(1)
nano /etc/sysctl.conf
fs.protected_symlinks_create = 1
fs.protected_hardlinks_create = 1
sysctl -p

OR

(2)
nano /etc/sysctl.d/cloudlinux-linksafe.conf
# SecureLinks Link Traversal Protection Section
fs.protected_symlinks_create = 1
fs.protected_hardlinks_create = 1
sysctl -p /etc/sysctl.d/cloudlinux-linksafe.conf

[bogdan.sh]

Hello,

Both methods will work. However, the industry standard is to keep all custom options in /etc/sysctl.d/ files. So, please remove the related lines from /etc/sysctl.conf.