SOLVED EA3 FileProtect & CageFS

[RyokoX]

Hello Everyone,

I have a server running CloudLinux/cPanel, and I'm already using CageFS to jail users in their own accounts.

Considering that CageFS already prevents users from accessing other users' files, do you think using FileProtect in Apache (built from EA3) worth it at all and does it provide any additional benefits?

I could not find much information about this 'FileProtect' which is available in cPanel's EasyApache.

Thanks,
RX

 

[cPanelMichael]

do you think using FileProtect in Apache (built from EA3) worth it at all and does it provide any additional benefits?

Hello,

CageFS includes features such as:

• Only safe binaries are available to user
• User will not see any other users, and would have no way to detect presence of other users & their user names on the server
• User will not be able to see server configuration files, such as Apache config files.
• User's will have limited view of /proc file system, and will not be able to see other' users processes

Thus, FileProtect isn't really necessary because CageFS already encapsulates users into their own filesystems.

Thank you.

 

[RyokoX]

Hello Michael,

Thanks for the confirmation!

Happy Holidays!

Regards,
RX