Updated: 28 September 2026 · Applies to: CloudLinux OS
Messages like "Access denied: uid 818, target uid 663" in /var/log/messages come from CloudLinux SecureLinks. It blocked a symbolic link owned by one user from reaching a file owned by another user.
This is protection working as intended: it stops users from reading other customers' files (such as configuration files with passwords) through symlinks. Check the account named by the first UID if the message repeats, because it may point to a malicious script.
