Security concern on modules

MrMatt

• April 03, 2017 08:39

Hello I wonder if you can help me please discuss my security concerns on some modules. In our cpanel server is Easy Apache 3, one of the mods under Other modules list is mod_pagespeed. There seems so be some sites using some kind of caching as I can see files called "beacon_cohort" using the locate command. There also appears to be some cached versions. I'm also concerned about uninstalling another module I have found. Apache Booster Found in : /var/ApacheBooster /usr/local/src/apachebooster /home/virtfs/ /usr/local/Cpanel/Config/ConfigObj/Driver/ApacheBooster /usr/local/ApacheBooster_64.tar.gz Please can you tell me the correct way to remove all trace of both modules. mod_pagespeed ApacheBooster Kind Regards Matt

• 

  cPanelMichael

  • April 03, 2017 16:30

  Hello Matt,

  Please can you tell me the correct way to remove all trace of both modules. mod_pagespeed ApacheBooster

  
  These are third-party modules so the removal instructions will depend on the instructions offered by the developer. You should be able to open the EasyApache profile via WHM and deselect Mod_PageSpeed. Regarding ApacheBooster, their website suggests an uninstall script: apachebooster.com/faq.php Thank you.

  0
• 

  MrMatt

  • April 04, 2017 14:12

  Hi Micheal Thanks again as always for your response. The Modpagespeed is disabled already in the EasyApache build. The Apachebooster uninstall script was run, there is still some activity and caching happening which is why I wondered if cpanel users had any knowledge how to entirely wipe the installations. Lesson learned third party modules are probably best avoided in the first place with cpanel having so many good scripts already. If anyone does want to chip in about removal of lingering modules I would be ever grateful ! Thanks Matt

  0
• 

  cPanelMichael

  • April 04, 2017 16:02

  Hello, Could you provide some more details about the caching activity that's occurring? Are you sure a new EasyApache build was ran after deselecting the PageSpeed module? Thank you.

  0
• 

  MrMatt

  • April 05, 2017 14:06

  Hi Michael Easy Apache was rebuilt yes. Theres files in /home/virtfs/newdomain/var/mod_pagespeed/cache/variouscacheddomains So what I am seeing is a list of domains appearing under a new domain made since the mod_pagespeed was turned off populating a directory namely /home/virtfs/newdomain/var/mod_pagespeed/cache/ This is only occurring on one new domain name ?

  0
• 

  cPanelMichael

  • April 05, 2017 17:13

  Hello, Does the corresponding file exist outside of the VirtFS directory? Here's a document that explains the purpose of this directory: VirtFS - Jailed Shell - Documentation - cPanel Documentation You could try using the "/scripts/clear_orphaned_virtfs_mounts" script referenced on the above document to see if that helps. Thank you.

  0

Please sign in to leave a comment.