The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Allow LES updating works?

Discussion in 'General Discussion' started by latpanel, Oct 28, 2004.

  1. latpanel

    latpanel Well-Known Member

    Joined:
    Jan 23, 2004
    Messages:
    134
    Likes Received:
    0
    Trophy Points:
    16
    I woud like to install LES (lLinux environment security, http://www.rfxnetworks.com/les.php ) in order to protect system files and avoid they be modified. I know that as result of this protection neither root can modify these files.
    My question is: does it let CPanel to update the installed software ?

    Thanks
     
  2. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    I would suspect that this would likely break quite a lot of things in cPanel, depending on what it makes immutable. Doesn't sound like a particularly good idea unless you know exactly what you are doing with it.
     
  3. latpanel

    latpanel Well-Known Member

    Joined:
    Jan 23, 2004
    Messages:
    134
    Likes Received:
    0
    Trophy Points:
    16
    I supose that CPanel have to change system files when it make an update of system or server software, and this is done with scripts. LES has the option to deactivate the protection of files, so perhaps there be a way to tell CPanel that it must run LES to deactivate before the update process and after it to reactivete protection.
    Is it possible?
    Anybody that is using LES could send an answer, please.

    Thanks
     
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    You could do that by modifying roots crontab:

    0 2 * * * /scripts/upcp

    to:

    0 2 * * * /root/disableles ; /scripts/upcp ; /root/enableles

    However, cPanel aren't going to give you support if you go around enabling the immutable flag on files and have problems. I still don't think it's a good idea to arbitrarily set files as immutable unless there is a specific reason for that file.
     
Loading...

Share This Page