Author Topic: setup php to run in chroot/jail  (Read 2578 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
setup php to run in chroot/jail
« on: January 27, 2017, 07:37:08 PM »
Can anyone help me in how to setup php to run in chroot/jail?
I need to separate the customers and increase the server security.
Recently from php with scandir the customers or hackers if somewhere the site was hacked can view/modify the major part of directories in CWP.
I want to jail each cutomer to its directory.
Thx
In case anyone wants $10 bonus for FREE on cheap cloud VPS from Vultr:
http://www.vultr.com/?ref=6855695
-------------------------------------------------------------------------------------------------
And $10 bonus for FREE on cheap cloud VPS from Digitalocean:
https://www.digitalocean.com/?refcode=c41029801394

Offline
*****
Re: setup php to run in chroot/jail
« Reply #1 on: January 28, 2017, 06:32:11 AM »
cwp uses suphp which is high in security . To increase the security of the PHP script always update the script to latest

Offline
*
Re: setup php to run in chroot/jail
« Reply #2 on: January 28, 2017, 06:42:04 PM »
I know that, but does not isolate the customers directories.
This is what I'm looking for.
In case anyone wants $10 bonus for FREE on cheap cloud VPS from Vultr:
http://www.vultr.com/?ref=6855695
-------------------------------------------------------------------------------------------------
And $10 bonus for FREE on cheap cloud VPS from Digitalocean:
https://www.digitalocean.com/?refcode=c41029801394

Offline
*
Re: setup php to run in chroot/jail
« Reply #3 on: January 29, 2017, 02:33:35 PM »
we don't have chrooted environment but you can use cloudlinux if you need something like that
AntiDDoS Protection (web + mail)
http://centos-webpanel.com/website-ddos-protection-proxy

Join our Development Team and get paid !
http://centos-webpanel.com/develope-modules-for-cwp


Services Monitoring & RBL Monitoring
http://centos-webpanel.com/services-monitor


Do you need Fast and FREE Support included for your CWP linux server?
http://centos-webpanel.com/noc-partner-list
Installation Instructions
http://centos-webpanel.com/installation-instructions
Get Fast Support Here
http://centos-webpanel.com/support-services

Offline
*
Re: setup php to run in chroot/jail
« Reply #4 on: January 30, 2017, 09:50:12 AM »
Thanks, but I don't need the cloudlinux features.
I need simple to restrict the customers only to their own directory and disallow from all others.
Recently they can access the entire rootfs from php or shh.
This seems to be a very big security hole if can't be fixed from CWP.

In case anyone wants $10 bonus for FREE on cheap cloud VPS from Vultr:
http://www.vultr.com/?ref=6855695
-------------------------------------------------------------------------------------------------
And $10 bonus for FREE on cheap cloud VPS from Digitalocean:
https://www.digitalocean.com/?refcode=c41029801394

Offline
**
Re: setup php to run in chroot/jail
« Reply #5 on: January 30, 2017, 01:03:57 PM »
Login as root to CWP and select FTP Management under the File Management category that should fix choot problem. Just open that and thats it, nothing else to do, it should automatically fix problem.

Offline
*
Re: setup php to run in chroot/jail
« Reply #6 on: February 03, 2017, 06:29:04 AM »
That doesn't change anything.
Jailkit can be a solution, is working fine in ISPConfig. Is this something that can be used in CWP?
In case anyone wants $10 bonus for FREE on cheap cloud VPS from Vultr:
http://www.vultr.com/?ref=6855695
-------------------------------------------------------------------------------------------------
And $10 bonus for FREE on cheap cloud VPS from Digitalocean:
https://www.digitalocean.com/?refcode=c41029801394