Web Hosting Talk







View Full Version : Control Panel - Chroot Options


Phil_B
01-17-2009, 06:53 PM
Parallel Pro (Ensim Pro) secures each client account in their own shell including PHP, MySQL etc while it seems other control panels have each client using the same instance of PHP. This for me looks to be a fundamental difference, is the former Chroot approach less likely for one clients exploit to lead to the whole server going down?
CPanel although very popular looks to have serious bloat with Directadmin offering the same functionality for a smaller footprint?
Any feedback on the Chroot difference would be appreciated. Im looking for the control panel which offers functionality without bloat but at the same time security in a multi client environment.
Thanks, Phil

Phil_B
01-18-2009, 04:13 PM
can anyone provide some information on this? Essentially looking for a control panel which has sufficient functionality without too much server load but at the same time is secure.
If one client is exploited/ hacked I do not want the whole server going down.

JayShah
01-18-2009, 05:42 PM
Do you actually require a chroot for each user? If you run a standard cPanel installation, but make sure all servers run with the users UID then you should be fine. I'm specifically talking about Apache running as nobody being a big no-no. Stick with a suPHP install, and no users can touch other users files. suPHP is setuid root though, but there haven't been any exploits for it - and with the volume of people using it, it's a safe bet to use.
If one client is exploited/ hacked I do not want the whole server going down.
When you say "go down", do you mean with things like fork bombs, or getting root access? I'm sure the former is unaffected by a chroot, and the latter is obviously less likely with a chroot, but I can't see that happening with any kind of installation.
Jay