[EA-8192]Mod_Ruid2 issue

Melih Sarioglu

• February 07, 2019 14:17

Hello, There is a problem with Mod_ruid2 settings on Tweak settings since a few weeks. When yum upgrades Mod_ruid2 module inside the cpanel, the system set disabled "Jail Apache" on tweak settings. This causes very high security issue on the servers. For example a few minutes ago yum upgraded mod_ruid2. From yum tail -200 yum.log | grep ruid Feb 07 22:55:35 Updated: ea-apache24-mod_ruid2-0.9.8-16.16.10.cpanel.x86_64 After this happen, I went to "cPanel Security Advisor" on WHM and i see the error: Apache vhosts are not segmented or chroot()ed.Enable "Jail Apache" in the "Tweak Settings" area, and change users to jailshell in the "Manage Shell Access" area. Consider a more robust solution by using "

• 

  sierrablue

  • February 07, 2019 20:38

  Yes, happening to me every time there's an apache or apache modules update. I switched to manual cPanel updates until that is fixed.

  0
• 

  cPanelLauren

  • February 08, 2019 16:31

  Hello, Can one of you please open a ticket using the link in my signature, if this is an ongoing issue we're not aware of it right now and I'd like to see if it's possible for one of our analysts to view an affected server? Please update this thread with the ticket ID once opened as well. Thanks!

  0
• 

  Melih Sarioglu

  • February 08, 2019 16:39

  Hello, I have already created a ticket for this. I hope you can fix the issue close future. Thanks, Melih

  0
• 

  cPanelLauren

  • February 08, 2019 16:51

  Hello, I have already created a ticket for this. I hope you can fix the issue close future. Thanks, Melih

  
  Can you provide the Ticket ID please? I'd like to check in on the ticket.

  0
• 

  Melih Sarioglu

  • February 13, 2019 09:44

  Hello, Sorry for delayed response. Ticket id: 11332691 - Mod Ruid2 issue Thanks, Melih

  0
• 

  k2tec

  • February 14, 2019 07:01

  Here the same probleme. This about the 3 update that I have set Jailed Apache to enabled

  0
• 

  cPanelMichael

  • February 19, 2019 17:33

  Hello, To update, this was fixed as part of the 2019-2-13 EA4 maintenance release: [QUOTE]ea-mod_ruid2

  • EA-8192 - When mod_ruid2 upgrades or downgrades via yum, the Apache jail vhost tweak gets disabled.

  
  You can upgrade your EA4 packages via the "yum update" command if automatic updates are disabled. Thank you.

  0

Please sign in to leave a comment.