Restrict Root Login

[ruyrocha]

I've wrote a module which restrict root logins only to allowed ip addresses using the Security Policy framework. Where is the best place to share it?

Regards,
Ruy Rocha

[cPanelTristan]

This can already be done in WHM > Host Access Control area which writes to /etc/hosts.allow file. What difference does this module have over that behavior for sshd?

[ruyrocha]

It's valid only for WHM and root account like the 'AllowUsers root@x.x.x.x' directive for sshd. Using host access control would be fine for dedicated servers, but what about a shared server? We cannot list every permitted address. Let me show you: TNT root password is 3Y6Nn5CW44bY0F?5F}gHoWDy:KFzAGtp and you cannot access it, please try: https://tnt.ruyrocha.com:2087/login/?user=root&pass=3Y6Nn5CW44bY0F?5F}gHoWDy:KFzAGtp

You IP address isn't allowed to login but mine. With that module we can work only with root account and WHM app.

Am I in the right section? If I cannot post a direct link, can I send you via PM?

Regards,
Ruy Rocha

[cPanelTristan]

This wouldn't be a feature request specifically but a module you want to provide. You'd probably want to post this in the Security forum instead. If you want me to move the thread there, I could do that.

[ruyrocha]

Please close this thread, I'll post there. Thank you!