Best profile setting

dilstar

• July 27, 2015 09:01

I am building new server, but i would like to have compeltly worrry free from symlink, i am not gonna take cloudlinux as i am on openvz. tell me should i go with modruid or i can go simply normal build, but if i will normally build without mod ruid, i will not no any issue as i have good experiance in normal build of easyapache but trying to think about mod ruid because of symlink protection. let me know what will be the best. if cpanel have fixed the symlinking attack issue in new cpanel version then i will install the normal web server profile . suggest me as it will be web host server. thanks

• 

  quizknows

  • July 27, 2015 16:54

  For most people, if you do not want to use RUID2, the "symlink race condition protection" option in EasyApache provides enough protection. You have to use a PHP handler like SuPHP or FCGI though so that file uploads are owned by the website user and not the "nobody" apache user.

  0
• 

  dilstar

  • July 27, 2015 21:10

  why should i not use RUID2 for web host production ? whats bad in it? thanks

  0
• 

  quizknows

  • July 28, 2015 02:32

  I am not saying that you should not use it; if you can make it work then it offers good security. You should carefully review the documentation:

  0
• 

  cPanelMichael

  • July 28, 2015 14:15

  why should i not use RUID2 for web host production ? whats bad in it? thanks

  
  Hello :) As mentioned, you can find the document on Mod_Ruid2 at:

  0

Please sign in to leave a comment.