The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Email notification on WHM root login?

Discussion in 'E-mail Discussions' started by M0nKeY, Dec 3, 2008.

  1. M0nKeY

    M0nKeY Member

    Joined:
    Jul 8, 2005
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    Is there any way to do this?

    Alternatively is there any way to disable root login for WHM?
     
  2. PDW

    PDW Well-Known Member

    Joined:
    Dec 29, 2003
    Messages:
    119
    Likes Received:
    0
    Trophy Points:
    16
  3. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    I started to post the same thing or suggest CSF when I read this on Thursday, but they put Disable Root Login Via WHM not SSH. I thought maybe you could possibly add a user to the wheel group then remove root from the wheel group but if a person was not careful they could lock themselves out of WHM.
     
  4. M0nKeY

    M0nKeY Member

    Joined:
    Jul 8, 2005
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    Rhenderson is on to what I'm asking about. I already have SSH secure.

    It seems weird that this feature has not been implemented. To me it seems like a substantial security oversight.
     
  5. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    I would think you would want someone to have full access to to WHM. You could make someone a wheel user in WHM and make sure they have access to WHM then remove root as a wheel user. I THINK let me stress THINK that would do it, but you can always drop a support ticket to cPanel and ask to be sure.
     
  6. M0nKeY

    M0nKeY Member

    Joined:
    Jul 8, 2005
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    That is not a solution to the security issue because there's still no notification when someone with full privileges logs in. I'm thinking about a situation where the password is compromised (for whatever reason).
     
Loading...

Share This Page