EA3 FileProtect & CageFS

RyokoX

• December 22, 2016 18:14

Hello Everyone, I have a server running CloudLinux/cPanel, and I'm already using CageFS to jail users in their own accounts. Considering that CageFS already prevents users from accessing other users' files, do you think using FileProtect in Apache (built from EA3) worth it at all and does it provide any additional benefits? I could not find much information about this 'FileProtect' which is available in cPanel's EasyApache. Thanks, RX

• 

  cPanelMichael

  • December 23, 2016 15:22

  do you think using FileProtect in Apache (built from EA3) worth it at all and does it provide any additional benefits?

  
  Hello, CageFS includes features such as: " Only safe binaries are available to user " User will not see any other users, and would have no way to detect presence of other users & their user names on the server " User will not be able to see server configuration files, such as Apache config files. " User's will have limited view of /proc file system, and will not be able to see other' users processes
  Thus, FileProtect isn't really necessary because CageFS already encapsulates users into their own filesystems. Thank you.

  0
• 

  RyokoX

  • December 23, 2016 21:23

  Hello Michael, Thanks for the confirmation! Happy Holidays! Regards, RX

  0

Please sign in to leave a comment.