Community Forums
Connect with us on LinkedIn
+ Reply to Thread
Page 1 of 3 1 2 3 LastLast
Results 1 to 15 of 43
  1. #1
    Member
    Join Date
    Aug 2001
    Posts
    362

    Default Atomic Secured Linux and cPanel. Does it work?

    Hi,

    I'm wondering if Atomic Secured Linux wil work on cPanel servers. Please post if you are running ASL or have experience with it.

    I'm think about start using it or at least the Security Rules Subscription but I want to hear from people who atually use it on cPanel servers first.

    More info:
    AtomiCorp - Atomic Secured Linux
    Atomic Secured Linux
    https://atomicorp.com/acshop.html

    Thank you!
    Webhostingtalk.nl :: For all your Dutch (AMS-IX - Amsterdam) and European hosting quotes
    The best and only hosting forum you need in Europe
    You can ask your quotes and questions in English!

  2. #2
    Member
    Join Date
    Aug 2001
    Posts
    362

    Default

    Nobody? It seems a good product.
    Webhostingtalk.nl :: For all your Dutch (AMS-IX - Amsterdam) and European hosting quotes
    The best and only hosting forum you need in Europe
    You can ask your quotes and questions in English!

  3. #3
    Member
    Join Date
    Aug 2004
    Posts
    174

    Default

    Hi did you tried it? I am also considering in implementing their suite.

  4. #4
    Member
    Join Date
    Feb 2006
    Posts
    13

    Default

    You can see my frustrations here in this thread.

    atomicorp.com • View topic - Cpanel Install problems

    My understanding is that it will not work with cpanel unless you use the lite version.

    At this point I have no idea what the lite version includes or the price. Still trying to find that one out

  5. #5
    Member
    Join Date
    Feb 2006
    Posts
    13

    Default

    I am going to give the lite version a go, Will post my progress hopefully with good results

  6. #6
    Member
    Join Date
    Aug 2007
    Location
    Orlando
    Posts
    12

    Default

    How did the lite version work out?

  7. #7
    Member
    Join Date
    Feb 2005
    Posts
    282

    Default

    I think ASL has a great product but is not for CPanel, I still think that CSF does a great job for cpanel users.

    I have used the Lite version but to be honest it doesn't do anything of the hardening that the complete suite of ASL does, the Lite version will only help you to update modsec rules, but for that I still prefer my own updater as it is more easy to implement and straight forward for cpanel users.

    On the other hand, I recommend to pay for the modsec rule suscription, as the rules are updated very often and they help you in case there is a false positive in any of them.

    Sergio.

  8. #8
    Member
    Join Date
    Aug 2007
    Location
    Orlando
    Posts
    12

    Default

    Wel, I decided to try the paid rules and use the asl-lite installer but it wasn't impressive. Do you run the full set of rules for each ruleset or do you pull some out to make it less resource intensive?

    Have you tried updating mod security like Mike suggested?

    Yes, I like CSF a lot also and Configserver has great instructions and info overall. Assp Deluxe has great instructions and info also. Atomic is kind of a mess, but that's me.

  9. #9
    Member
    Join Date
    Feb 2005
    Posts
    282

    Default

    Quote Originally Posted by John W View Post
    Wel, I decided to try the paid rules and use the asl-lite installer but it wasn't impressive. Do you run the full set of rules for each ruleset or do you pull some out to make it less resource intensive?

    Have you tried updating mod security like Mike suggested?

    Yes, I like CSF a lot also and Configserver has great instructions and info overall. Assp Deluxe has great instructions and info also. Atomic is kind of a mess, but that's me.
    If you check on my updater http://forums.cpanel.net/f185/modsec...er-147745.html you can tweak it to pull out any rules that you want if you know how to modify the shebang file. I do it in my own updater, because it is a little bit more complex as I have a few rules of my own.

    ASL-Lite is ok, but I think is not from the point of view of a cpanel user, it ask a lot of questions before you completly install it. The good thing is that they tried to do a script that could be used for cpanel users, maybe in a future they could change it a little bit more.

  10. #10
    Member
    Join Date
    Sep 2009
    Location
    United Kingdom
    Posts
    110
    cPanel/Enkompass Access Level

    DataCenter Provider

    Default

    I wouldn't want ASL on my cPanel servers, since the ASL team come across as very anti-cPanel to begin with, as in properly slating the product because of how cPanel have decided to use EA instead of installing via YUM, etc. Doesn't give the right sort of impression.

    ConfigServer however have a cPanel version and a standalone version of CSF, so anyone can pretty much use it. If they took on ASL and did their own security suite, it would win IMO.

  11. #11
    Member This forum account has been confirmed by cPanel staff to represent a vendor.
    Join Date
    Apr 2008
    Posts
    80

    Default

    Actually the issue with cpanel is just package management. Everything we do, and everything CPanel does should work just fine - and there are people running ASL on cPanel boxes.

    Its automating installations and upgrades with CPanel thats currently problematic. Unless cpanel has changed in the last couple of months the issue is that CPanel doesnt use package management for things like mod_secuirty, PER and mysql. This creates a problem for something as robust as ASL because:

    1. We don't know what is and is not installed on the system (is mysql installed for example? what version? what version of mod_sec? etc.)
    2. If something is built against version X of mysql, for example, we can know that on any Linux system using the many package management solutions (deb, rpm, etc.) and will know what version to install against - its all automatic, with lots of great dependency analysis support - with cpanel, that doesnt exist - we just don't know.
    3. This means things get overwritten and broken when cpanel is installed and upgraded.
    4. We dont like breaking things.

    We'd LOVE to be able to support cpanel, and we are trying to sort out a way to do this, but package management is a pretty standard thing and only cPanel seems to have taken this path - so I'd say if the cpanel guys were willing to work with us we'd be delighted to be able to support Cpanel. Nothing would make us happier.
    Michael Shinn
    Prometheus Global - home of gotroot.com and Atomicorp and
    Secure Your Server Now with Atomic Secured Linux!

  12. #12
    Member This forum account has been confirmed by cPanel staff to represent a vendor.
    Join Date
    Apr 2008
    Posts
    80

    Default

    ASL-Lite is ok, but I think is not from the point of view of a cpanel user, it ask a lot of questions before you completly install it. The good thing is that they tried to do a script that could be used for cpanel users, maybe in a future they could change it a little bit more.
    Sergio you know that we love your feedback (and as customer of the Real Time rules thank you for your business)! All you have to do is ask and we'd be happy to make whatever changes you want. :-)

    Did I mention we really want to able to support cPanel? Really, I'm working on a big glob clobber installer and have been for several weeks to try and work around the lack of package management.
    Michael Shinn
    Prometheus Global - home of gotroot.com and Atomicorp and
    Secure Your Server Now with Atomic Secured Linux!

  13. #13
    Member rpmws's Avatar
    Join Date
    Aug 2001
    Location
    back woods of NC, USA
    Posts
    1,858

    Default

    Quote Originally Posted by mikegotroot View Post
    Sergio you know that we love your feedback (and as customer of the Real Time rules thank you for your business)! All you have to do is ask and we'd be happy to make whatever changes you want. :-)

    Did I mention we really want to able to support cPanel? Really, I'm working on a big glob clobber installer and have been for several weeks to try and work around the lack of package management.
    mike i just subscribed to the asl-lite and ran the installer on a cPanel centos5.4_64 box and it threw some dep errors.

    Loaded plugins: fastestmirror
    Loading mirror speeds from cached hostfile
    * addons: mirrors.service.softlayer.com
    * atomic: www6.atomicorp.com
    * base: mirrors.service.softlayer.com
    * extras: mirrors.service.softlayer.com
    * updates: mirrors.service.softlayer.com
    Excluding Packages in global exclude list
    Finished
    Setting up Install Process
    Resolving Dependencies
    --> Running transaction check
    ---> Package asl-lite.x86_64 1:2.2.6-0.1.el5.art set to be updated
    --> Processing Dependency: roadsend-php-libs for package: asl-lite
    --> Running transaction check
    ---> Package roadsend-php-libs.x86_64 0:2.9.8-9.el5.art set to be updated
    --> Processing Dependency: libbigloo_u-3.0c.so()(64bit) for package: roadsend-php-libs
    --> Processing Dependency: libbigloogc-3.0c.so()(64bit) for package: roadsend-php-libs
    --> Processing Dependency: libodbc.so.1()(64bit) for package: roadsend-php-libs
    --> Processing Dependency: libmysqlclient.so.15()(64bit) for package: roadsend-php-libs
    --> Running transaction check
    ---> Package bigloo-libs.x86_64 0:3.0c-1.el5.art set to be updated
    ---> Package roadsend-php-libs.x86_64 0:2.9.8-9.el5.art set to be updated
    --> Processing Dependency: libmysqlclient.so.15()(64bit) for package: roadsend-php-libs
    ---> Package unixODBC.x86_64 0:2.2.11-7.1 set to be updated
    --> Finished Dependency Resolution
    roadsend-php-libs-2.9.8-9.el5.art.x86_64 from atomic has depsolving problems
    --> Missing Dependency: libmysqlclient.so.15()(64bit) is needed by package roadsend-php-libs-2.9.8-9.el5.art.x86_64 (atomic)
    Error: Missing Dependency: libmysqlclient.so.15()(64bit) is needed by package roadsend-php-libs-2.9.8-9.el5.art.x86_64 (atomic)
    You could try using --skip-broken to work around the problem
    You could try running: package-cleanup --problems
    package-cleanup --dupes
    rpm -Va --nofiles --nodigest
    The program package-cleanup is found in the yum-utils package.

    without attempting on any other boxes, i figured i would give it a shot in here since this thread got my attention to try it. I am running latest and greatest php/mysql and apache. any suggestions to make this easier? I didn't look into solving any deps (yet)
    Just keeping my "eye" on things....
    R. Paul Mathews
    RPMWS - diehard cPanel Nutcase

  14. #14
    Member This forum account has been confirmed by cPanel staff to represent a vendor.
    Join Date
    Apr 2008
    Posts
    80

    Default

    Thank you for the question. The best way to report a support issue is to email our support team: support@atomicorp.com or post on our forums:

    atomicorp.com forums

    On first glance, that looks like you might not be running the latest cpanel. I just did a fresh install of cpanel and then asl-lite without issue.

    What version of cpanel are you running?
    Last edited by mikegotroot; 10-14-2010 at 02:54 PM.
    Michael Shinn
    Prometheus Global - home of gotroot.com and Atomicorp and
    Secure Your Server Now with Atomic Secured Linux!

  15. #15
    Member rpmws's Avatar
    Join Date
    Aug 2001
    Location
    back woods of NC, USA
    Posts
    1,858

    Default

    Quote Originally Posted by mikegotroot View Post
    Thank you for the question. The best way to report a support issue is to email our support team: support@atomicorp.com or post on our forums:

    atomicorp.com forums

    On first glance, that looks like you might not be running the latest cpanel. I just did a fresh install of cpanel and then asl-lite without issue.

    What version of cpanel are you running?
    my version is so much "latest" that it's EDGE
    Just keeping my "eye" on things....
    R. Paul Mathews
    RPMWS - diehard cPanel Nutcase

Similar Threads & Tags
Similar threads

  1. Atomic Secured Linux and cPanel. Does it work?
    By Domenico in forum cPanel and WHM Discussions
    Replies: 4
    Last Post: 02-03-2010, 07:47 PM
  2. Will cpanel work on Red Hat Enterprise Linux 5 Desktop?
    By Robert_ in forum New User Questions
    Replies: 5
    Last Post: 10-18-2008, 02:40 PM
  3. Firefox on Linux (FC5) doesn't work
    By chmac in forum cPanel and WHM Discussions
    Replies: 0
    Last Post: 06-15-2006, 06:42 AM
Linkedin       Facebook       Twitter       RSS       Flickr       YouTube