The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Security concern on modules

Discussion in 'Security' started by MrMatt, Apr 3, 2017.

  1. MrMatt

    MrMatt Member

    Joined:
    Oct 7, 2015
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    London
    cPanel Access Level:
    Root Administrator
    Hello

    I wonder if you can help me please discuss my security concerns on some modules.

    In our cpanel server is Easy Apache 3, one of the mods under Other modules list is mod_pagespeed.

    There seems so be some sites using some kind of caching as I can see files called "beacon_cohort" using the locate command.

    There also appears to be some cached versions.

    I'm also concerned about uninstalling another module I have found.
    Apache Booster Found in :

    /var/ApacheBooster
    /usr/local/src/apachebooster
    /home/virtfs/
    /usr/local/Cpanel/Config/ConfigObj/Driver/ApacheBooster
    /usr/local/ApacheBooster_64.tar.gz

    Please can you tell me the correct way to remove all trace of both modules.
    mod_pagespeed
    ApacheBooster

    Kind Regards

    Matt
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    36,980
    Likes Received:
    1,275
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello Matt,

    These are third-party modules so the removal instructions will depend on the instructions offered by the developer. You should be able to open the EasyApache profile via WHM and deselect Mod_PageSpeed. Regarding ApacheBooster, their website suggests an uninstall script:

    apachebooster.com/faq.php

    Thank you.
     
  3. MrMatt

    MrMatt Member

    Joined:
    Oct 7, 2015
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    London
    cPanel Access Level:
    Root Administrator
    Hi Micheal

    Thanks again as always for your response.

    The Modpagespeed is disabled already in the EasyApache build.

    The Apachebooster uninstall script was run, there is still some activity and caching happening which is why I wondered if cpanel users had any knowledge how to entirely wipe the installations.

    Lesson learned third party modules are probably best avoided in the first place with cpanel having so many good scripts already.

    If anyone does want to chip in about removal of lingering modules I would be ever grateful !

    Thanks

    Matt
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    36,980
    Likes Received:
    1,275
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you provide some more details about the caching activity that's occurring? Are you sure a new EasyApache build was ran after deselecting the PageSpeed module?

    Thank you.
     
  5. MrMatt

    MrMatt Member

    Joined:
    Oct 7, 2015
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    London
    cPanel Access Level:
    Root Administrator
    Hi Michael

    Easy Apache was rebuilt yes.

    Theres files in /home/virtfs/newdomain/var/mod_pagespeed/cache/variouscacheddomains

    So what I am seeing is a list of domains appearing under a new domain made since the mod_pagespeed was turned off populating a directory namely

    /home/virtfs/newdomain/var/mod_pagespeed/cache/

    This is only occurring on one new domain name ?
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    36,980
    Likes Received:
    1,275
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Does the corresponding file exist outside of the VirtFS directory? Here's a document that explains the purpose of this directory:

    VirtFS - Jailed Shell - Documentation - cPanel Documentation

    You could try using the "/scripts/clear_orphaned_virtfs_mounts" script referenced on the above document to see if that helps.

    Thank you.
     
Loading...

Share This Page