What is CageFS ?

CageFS is a virtualized file system and a set of tools to contain each user in its own private virtual space. Each customer will have its own fully functional CageFS, with all the system files, tools, etc. With regards to server security, CageFS which works with cloud Linux is an option.

The benefits of CageFS are:

1. Only safe binaries are available to user
2. User will not see any other users, and would have no way to detect presence of other users & their user names on the server
3. User will not be able to see server configuration files, such as Apache config files
4. User's will have limited view of /proc file system, and will not be able to see other' users processes
5. CageFS becomes part of CloudLinux OS and there is no additional charge for it
6. Easy to install and configure CageFS

CageFS will automatically detect and configure all necessary files for:

• cPanel
• Plesk
• DirectAdmin
• ISPmanager
• Interworx
• MySQL
• PostgreSQL
• LiteSpeed

Web interface to manage CageFS is available for cPanel, Plesk 10+, DirectAdmin, ISPmanager & Interworx. Command line tool would need to be used for other control panels.

CageFS provides for two modes of operations:

1. Enabled for all, except those that are disabled
2. Disabled for all, except those that are enabled

Mode #1 is convenient for production operation, where you want all new users to automatically be added to CageFS.
Mode #2 is convenient while you test CageFS, as it allows you to enable it on one by one for your customers.

To start using CageFS you have to select one of the mode of operations.

$ /usr/sbin/cagefsctl --enable-all
or
$ /usr/sbin/cagefsctl --disable-all
or
$ /usr/sbin/cagefsctl --toggle-mode (That will switch the operation mode, preserving current disabled/enabled users)

To enable individual user do:
$ /usr/sbin/cagefsctl --enable [username]

To disable individual user:
$ /usr/sbin/cagefsctl --disable [username]

To see current mode of operation:
$ /usr/sbin/cagefsctl --display-user-mode

Final note: As I explained all the benefits above, I would also recommend CageFS as it gives Security of our account as well as flexibility of own private area.

Comments

  1. Cognex Technology8/12/2020 2:46 pm

    That is a fantasic blog about cagefs, it will help me to identify and engage next level of improvement.
    -click here

    ReplyDelete
  2. Anonymous4/19/2022 1:28 pm

    What Is Cagefs ? >>>>> Download Now

    >>>>> Download Full

    What Is Cagefs ? >>>>> Download LINK

    >>>>> Download Now

    What Is Cagefs ? >>>>> Download Full

    >>>>> Download LINK al

    ReplyDelete

Post a Comment

Popular posts from this blog

SVN: File remains in conflict

This error occurs when you didn't update the SVN and try to commit changes or, someone has made changes to this file that are conflicting with your changes. There are two ways to handle this situation. Either, you can revert back the changes you want to commit and then, update the SVN and after that make the changes again and commit. The other way is, you need to resolve the conflicted files one by one. You can keep all the conflicted files in a folder and resolved it at once. >> Revert the changes steps: svn revert . -R svn up >> Resolve the conflicted files: svn resolved <file_name>
Read more

12 tweakings for WHM/cPanel to speed up WordPress

   1. Turning Mailman off – WHM >> Server Configuration >>  Tweak Settings and turning it off    2. Number of minutes between mail server queue runs (default is 60) – Setting it 120    3. Default catch-all/default address behavior for new accounts” to fail    4. Boxtrapper Spam Trap and SpamAssassin Spam Box delivery – off    5. Analog Stats – off    6. Conserve Memory at the expense of using more cpu/diskio – turn on    7. WHM >> Service Configuration >> FTP Server Configuration – Check ‘no’ to ‘allow anonymous logins and ‘no’ to ‘anonymous uploads’    8. WHM >> cPanel >> Manage Plugins – install spamdconf – then go to ‘Setup Spamd Startup Configuration’ – select option 2 ‘Maximum Children” to 2′    9. Run your cron jobs at off peak hours.   10. Install e Accelerator PHP accelerator (Recompile Apache with eAccelerator)   11. ...
Read more

HowTo: Enable extended logging for exim

When troubleshooting mail or attempting to discover the source of spam originating from your server, it is often useful to enable extended Exim logging. You can enable extended logging for exim though your shell prompt as well as through WHM interface. I am giving the steps for both ways one by one: 1. Through shell prompt: 1. Open exim.conf 2) Find this: hostlist auth_relay_hosts = * 3) After hostlist auth_relay_hosts = * add the following: log_selector = +address_rewrite +all_parents +arguments +connection_reject +delay_delivery +delivery_size +dnslist_defer +incoming_interface +incoming_port +lost_incoming_connection +queue_run +received_sender +received_recipients +retry_defer +sender_on_delivery +size_reject +skip_delivery +smtp_confirmation +smtp_connection +smtp_protocol_error +smtp_syntax_error +subject +tls_cipher +tls_peerdn 4) The final result should look like this hostlist auth_relay_hosts = * log_selector = +address_rewrite +all_parents +arguments +connecti...
Read more