Hiding binaries on cpanel server

[winlinuxadmins]

Hello,

If you having cagefs enabled for your Cpanel server you can hide the binary from user which might be harmful to server and cause of exploit by adding binary name into "black.list" file.

example :
root@myserver[~]#cat /etc/cagefs/black.list
/bin/uname
root@myserver[~]#

After adding the file to blacklist make sure you update the cagefs with cagefsctl --update option.

Regards,
Winlinuxadmins

 

[cPanelMichael]

Hello

I have moved this thread to the "Security" forum as it will be more useful there.

Thank you.