Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SOLVED New User Permissions

Discussion in 'Security' started by durangod, Feb 6, 2018.

  1. durangod

    durangod Well-Known Member

    Joined:
    May 12, 2012
    Messages:
    365
    Likes Received:
    17
    Trophy Points:
    68
    cPanel Access Level:
    Root Administrator
    Hi, i have my cpanel backups being loaded onto a remote server (whoohooo :] ) via the whm backup system. Its working fantasticaly!!

    It is running under a user backwhm

    I changed the owner of the backup dir to be owned by backwhm so they could write to it and that is working fine.

    What i would like to do going forward is restrict backwhm to only that backup dir, i dont want that user being able to bounce around all over the place as its ONLY for backups. I assume this user will need full read/write/ and other permissions inside that dir but not outside it.

    here are the specifics as things stand now. What do i need to do command wise to set this up correctly?


    backup directory owner...

    Code:
    # ls -la /backup
    total 12
    drwxr-xr-x   3 backwhm backwhm 4096 Feb  6 09:01 .
    dr-xr-xr-x. 23 root    root    4096 Feb  4 14:13 ..
    drwxr-xr-x   4 backwhm root    4096 Feb  6 09:01 2018-02-06
    
    and
    
    # ls -l /backup
    total 4
    drwxr-xr-x 4 backwhm root 4096 Feb  6 09:01 2018-02-06
    
    
    backwhm groups ..

    Code:
    # groups backwhm
    backwhm : root
    
    anything else you need to see?

    thanks
     
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,067
    Likes Received:
    348
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    If backups are working, that's it. There is nothing else to tweak there. You're the only one who knows that user and his password, as you've configured your backups to use the account.
     
  3. durangod

    durangod Well-Known Member

    Joined:
    May 12, 2012
    Messages:
    365
    Likes Received:
    17
    Trophy Points:
    68
    cPanel Access Level:
    Root Administrator
    OK thanks, i was just thinking that the PW is in the backup config. But i guess that is hashed in the Cpanel DB...
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,067
    Likes Received:
    348
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Make sure your login to WebHost Manager is properly secured and you'll be fine.
     
  5. durangod

    durangod Well-Known Member

    Joined:
    May 12, 2012
    Messages:
    365
    Likes Received:
    17
    Trophy Points:
    68
    cPanel Access Level:
    Root Administrator
    great thanks
     
Loading...

Share This Page