Cloudlinux symlink security

[anniesteephan]

Hi,

We recently moved our servers to cloudlinux as many recommending it to
fix symlink security issue discussed in following thread.

http://forums.cpanel.net/f185/how-prevent-creating-symbolic-links-non-root-users-202242.html

After moving server to cloudlinux, i don't do the normal httpd.conf
disable FollowSymlink overide. After few days, our sites got hacked. We
fixed it by modifying httpd.conf as per the thread.

How do i make cloudlinux protect againest these type of attacks ?

I read many suggesting CageFS, this can be installed on live servers
or it is a file system like ext3/4 etc.. that need to be enabled
during OS installation ?

Thanks,

Annie

 

[lldeepakll]

Hi,

CageFS is a virtualized file system and a set of tools to contain each user in its own 'cage'. It can be install using simple Yum command. You can find the cagefs installation steps at below url.

CloudLinux Documentation

You can also enable securelinks as described at below url.

SecureLinks.


Thanks

 

[AlexisMeroni]

The cage don't work --'

 

[iseletsk]

Alexis,

Could you give a bit more details -- what exactly doesn't work?
CageFS by itself doesn't prevent symlink problem. You have to enable SecureLinks protection to solve it:
CloudLinux Documentation