Jail security warning

[uk01]

Hi we are well aware of the issues surrounding the jailed apache.

However, the latest version of cpanel tonight now sends us an email showing high apache warning

“Apache vhosts are not segmented or chroot()ed. Enable “Jail Apache” in the “Tweak Settings” area, and change users to jailshell in the “Manage Shell Access” area. Consider a more robust solution by using “CageFS on CloudLinux”. Note that this may break t...”

You know many people can’t enable this and switching to mod ruid causes too many issues with users who have Php.ini/htaccess rules.

Also the option you recommend is still experimental.

Without appearing rude, it’s almost like we are being pushed to use cageFS. Cloudlinux is an additional expense just to get this feature.

 

[cPanelMichael]

Hello @uk01,

The experimental state of the Jail Apache option was recently brought up as part of internal case CPANEL-22176, however there's currently no specific time frame to offer on when that tag will be removed.

The alert itself is by design, however I can see how more control over individual notifications would help. I encourage you to vote and add feedback to the following feature request:

Disable specific Security Advisor State Change notifications

In the meantime, you can turn off "Security Advisor State Change" in WHM >> Contact Manager to disable these notifications (though keep in mind it will disable all state change notifications).

Thank you.