Control Web Panel

WebPanel => PHP => Topic started by: aicon on January 27, 2017, 07:37:08 PM

Title: setup php to run in chroot/jail
Post by: aicon on January 27, 2017, 07:37:08 PM
Can anyone help me in how to setup php to run in chroot/jail?
I need to separate the customers and increase the server security.
Recently from php with scandir the customers or hackers if somewhere the site was hacked can view/modify the major part of directories in CWP.
I want to jail each cutomer to its directory.
Thx
Title: Re: setup php to run in chroot/jail
Post by: Sandeep on January 28, 2017, 06:32:11 AM
cwp uses suphp which is high in security . To increase the security of the PHP script always update the script to latest
Title: Re: setup php to run in chroot/jail
Post by: aicon on January 28, 2017, 06:42:04 PM
I know that, but does not isolate the customers directories.
This is what I'm looking for.
Title: Re: setup php to run in chroot/jail
Post by: Administrator on January 29, 2017, 02:33:35 PM
we don't have chrooted environment but you can use cloudlinux if you need something like that
Title: Re: setup php to run in chroot/jail
Post by: aicon on January 30, 2017, 09:50:12 AM
Thanks, but I don't need the cloudlinux features.
I need simple to restrict the customers only to their own directory and disallow from all others.
Recently they can access the entire rootfs from php or shh.
This seems to be a very big security hole if can't be fixed from CWP.

Title: Re: setup php to run in chroot/jail
Post by: Gogo on January 30, 2017, 01:03:57 PM
Login as root to CWP and select FTP Management under the File Management category that should fix choot problem. Just open that and thats it, nothing else to do, it should automatically fix problem.
Title: Re: setup php to run in chroot/jail
Post by: aicon on February 03, 2017, 06:29:04 AM
That doesn't change anything.
Jailkit can be a solution, is working fine in ISPConfig. Is this something that can be used in CWP?
Title: Re: setup php to run in chroot/jail
Post by: Neo2SHYAlien on April 07, 2019, 04:28:50 PM
That doesn't change anything.
Jailkit can be a solution, is working fine in ISPConfig. Is this something that can be used in CWP?
Yes. This is shame that option is still missing in CWP