Symlink Race Protection - EA4

hicom

• September 30, 2016 11:26

Hi, so to recap on the issue of SymLink Race Protection, is this document still applicable to CentOS 7 and EasyApache 4: Symlink Race Condition Protection - EasyApache - cPanel Documentation Further, would using PHP-FPM+Prefork instead of mod_ruid2+Prefork be sufficient to protect the server from symlink race protection ? Thanks

• 

  cPanelMichael

  • October 04, 2016 22:04

  Hello, That document is intended for EasyApache 3. Information about symlink race protection with EasyApache 4 is found at: EasyApache4 symlink race protection

  Further, would using PHP-FPM+Prefork instead of mod_ruid2+Prefork be sufficient to protect the server from symlink race protection ?

  
  It's not just Mod_Ruid2, but the combination of Mod_Ruid2 with the "EXPERIMENTAL: Jailshell Virtual Hosts using mod_ruid2 and cPanel jailshell in WHM's Tweak Settings interface" option that adds the protection. Thank you.

  0
• 

  Spork Schivago

  • October 12, 2016 19:41

  Sorry to butt in and hijack this thread a bit, but I just want to make sure I understand what you're saying cPanelMichael. You're saying if I'm running EasyApache4 and have Mod_Ruid2 enabled and the cPanel "EXPERIMENTAL: Jailshell Virtual Hosts" enabled under the Tweak Settings, I have symlink race protection? Thanks.

  0
• 

  cPanelMichael

  • October 12, 2016 20:35

  Sorry to butt in and hijack this thread a bit, but I just want to make sure I understand what you're saying cPanelMichael. You're saying if I'm running EasyApache4 and have Mod_Ruid2 enabled and the cPanel "EXPERIMENTAL: Jailshell Virtual Hosts" enabled under the Tweak Settings, I have symlink race protection? Thanks.

  
  Yes, that's considered a filesystem solution and offers protection: Symlink Race Condition Protection - EasyApache - cPanel Documentation Thank you.

  0
• 

  Spork Schivago

  • November 07, 2016 20:40

  Yes, that's considered a filesystem solution and offers protection:

  0
• 

  cPanelMichael

  • November 07, 2016 20:55

  Hello, Installing Mod_Security and Mod_Ruid2 together is no longer blocked in EasyApache 4, but you are correct in stating there are existing DBM issues with Mod_Security when using Mod_Ruid2. The following thread offers a user-submitted workaround you could try: ModSecurity - SecDataDir Thank you.

  0

Please sign in to leave a comment.