cagefs and some questions

Login:
Password:
	Remember me on this computer

Forgot your password?
Register

RSS

cagefs and some questions, cagefs, ssh

Manuel Kissoyan

Posts: 27 Points: 13 Joined: 16.03.2011

04.01.2012 08:24:53

Hi there,

Im looking to have cagefs on my severs for current jailshell users and i have some questions.
Although i see there are a instructions to install in a specific cpanel server, looks like there isnt any plugin or graphical way to active per user as it have currently for jailshell or shell in WHM.
Should i proceed to first disable all the shell/jailshell at cpanel and then enable cagefs for the desired users?
What happen if by error once cagefs is enabled in a user i go ahead and enable cpanel jailshell for that same user, this will somehow create a conflict?

IS there any eta for a non-beta version?

Thanx in advance!

John MacKenzie

Posts: 13 Points: 6 Joined: 02.04.2011

04.01.2012 09:32:23

I have a few questions as well

1) I recently went through some hoops to get rssh setup so that i can provide users scp access. so does this actually allow someone to ssh or scp into the server if active without having ssh enabled? I read the docs but really am still unclear.

2) does it only create 1 set of extra binaries (unlike jailshell which creates a new set for every user)?

thanks

Igor Seletskiy

Administrator

Posts: 911 Points: 728 Joined: 09.02.2010

04.01.2012 13:48:49

1. You would still need to enable SSH for the user -- like you would regularly do it. It just that would not see anyone on the server but themselves, and their ability to do any damage (or to discover any info they shouldn't be able to discover) highly diminished.

2. Yes, one set of binaries for all.

3. Wait for CageFS 3.0 -- should be coming out tomorrow... or I will start firing my developers smile:)

Manuel Kissoyan Posts: 27 Points: 13 Joined: 16.03.2011	#4 13.01.2012 20:12:16 I see beta 3.0 is out and looking the cpanel plugin images i see they are listing the user that you wish to enable/disable cagefs, wondering if it only show the already cpanel jailshell or shell enabled users or it list all the server users? Thanx!

Igor Seletskiy

Administrator

Posts: 911 Points: 728 Joined: 09.02.2010

14.01.2012 10:13:17

1. CageFS covers shell, cron jobs and web sessions. Enabling cagefs for the user will make sure that if user executes anything via any of this 3 vectors, it will be caged.
2.You should disable JailShell when using CageFS (as cagefs provides similar infrastructure + more).
3. If user has shell enabled, his shell session will be caged (as long as he has CageFS enabled), if shell is disabled -- he will not have shell access.

Manuel Kissoyan Posts: 27 Points: 13 Joined: 16.03.2011	#6 14.01.2012 11:51:28 Thanx Igor...to clarify, in my case i only provide Jailshell to users so in this case i have to disable jailshell, then enabled Shell and then enable cagefs? Or simply disabling jailshell and enabling cagefs it will automatically enable shell too in cpanel? Or i have to go to enable shell and then enable cagefs for those users? Thanx again!

Igor Seletskiy Administrator Posts: 911 Points: 728 Joined: 09.02.2010	#7 14.01.2012 21:38:04 Disable JailShell, enable cagefs, and then enable shell.

Users browsing this topic (1 guests, 0 registered, 0 hidden)

Solutions