Jailed cgi/perl

[Fr3DBr]

Hello,

How can we do this using cpanel ?

We have a few users running cgi processes, but at the same time we have issues with hacking, due to the malicious usage of certain perl scripts.

What can we do ?

 

[arunsv84]

You may find this useful.

WWW Security FAQ: CGI Scripts

Cheers!!!

 

[Fr3DBr]

Hello,

I didn't found much on this subject I am interested.

The purpose is avoid hackers from 'local rooting' the server.

 

[arunsv84]

To avoid hackers, you need to check & analyze the scripts, make sure that its written in safe way and have the correct permissions. Check the following url for detailed explanation.

Securing your cgi-bin | VerySimple

Cheers!!!

 

[Fr3DBr]

To avoid hackers, you need to check & analyze the scripts, make sure that its written in safe way and have the correct permissions. Check the following url for detailed explanation.

Securing your cgi-bin | VerySimple

Cheers!!!

Yes, i get it, the problem is that doing something similar with alot of users in a webhosting is very complicated.

So Jailing / Chrooting perl is a much more suitable option...