Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 11th May 2006, 00:22
Norman Norman is offline
HowtoForge Supporter
 
Join Date: May 2006
Posts: 242
Thanks: 0
Thanked 18 Times in 14 Posts
Default Prevent users from reading eachothers directories + ISPConfig compatibility

Is there a good way to maintain some security in the system for shell-users without having to chroot/jail everyone?

I've tried to simply change user dir permissions chmod 701 to hide people from snooping the files initially. However that seems to make ISPC unable to read statistics (quota) from the directories. Are there any efficient methods to handle this? I tried to turn on sudo support for the du-command as shown in other threads but it doesnt seem to help.

Is sudo-config option bugged?

admispconfig has permission to run du under sudo.
__________________
http://www.xh.se
Reply With Quote
Sponsored Links
  #2  
Old 11th May 2006, 00:32
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
Default

Quote:
Originally Posted by Norman
Is sudo-config option bugged?
No, it's working fine on our test machines.
I think the problem is that you changed the permissions to 701. That way only the owner (and noone else) can read.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 11th May 2006, 17:32
Norman Norman is offline
HowtoForge Supporter
 
Join Date: May 2006
Posts: 242
Thanks: 0
Thanked 18 Times in 14 Posts
Default

Yes, but shouldn't it be possible to change

$go_info["server"]["sudo_du_enabled"] = false; // enable sudo for gathering website file usage
to:
$go_info["server"]["sudo_du_enabled"] = true; // enable sudo for gathering website file usage

Then shouldn't ispconfig run "du" as sudo-root?

I think it's a security-risk to leave directories as 755 .

Also, a side-question. Does ispconfig use the quota-function of the system?
I dont see it using any of the diskquotas.
__________________
http://www.xh.se
Reply With Quote
  #4  
Old 11th May 2006, 18:10
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
Default

Quote:
Originally Posted by Norman
Also, a side-question. Does ispconfig use the quota-function of the system?
I dont see it using any of the diskquotas.
Yes - if you have quota installed.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 11th May 2006, 22:10
Norman Norman is offline
HowtoForge Supporter
 
Join Date: May 2006
Posts: 242
Thanks: 0
Thanked 18 Times in 14 Posts
Default

It is installed, how can I see if it's being used in ISPConfig?

Check each users with "quota" command?
__________________
http://www.xh.se
Reply With Quote
  #6  
Old 12th May 2006, 11:02
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
Default

You can use the repquota command:
Code:
repquota -avug
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig stopped working when adding users. willy-na General 1 12th April 2006 12:36
Next error while installing ISPconfig my-webhosting Installation/Configuration 1 12th March 2006 14:30
Add DNS to a "Virtual Users And Domains" installation, and finish with ISPConfig Nuxeretes Installation/Configuration 4 2nd March 2006 14:02
ISPConfig stopped creating users, sites... Traxus Installation/Configuration 4 9th February 2006 10:00
Ability to add components for users webstergd Feature Requests 1 20th December 2005 10:25


All times are GMT +2. The time now is 23:59.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.