• The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

chroot security questions

wduric

New Pleskian
Dears,

I have plesk 12.0 and discovered in directory /var/www/vhosts/chroot following:
drwxr-xr-x. 3 root root 4096 Feb 1 12:57 bin
drwxr-xr-x. 2 root root 4096 Feb 1 12:57 dev
drwxr-xr-x. 2 root root 4096 Feb 1 12:57 etc
drwxr-xr-x. 2 root root 4096 Feb 1 12:57 lib
drwxr-xr-x. 2 root root 4096 Feb 1 12:57 lib64
drwxrwxrwt. 2 root root 4096 Feb 1 12:57 tmp
drwxr-xr-x. 4 root root 4096 Feb 1 12:57 usr
drwxr-xr-x. 3 root root 4096 Feb 1 12:57 var

in ./bin I can even find
-rwxr-xr-x. 1 root root 52656 Jun 22 2012 touch

knowing that touch can be use to change the date of a file, I wonder if there is not a security danger of having all these commands available on chroot.

I have been searching if I shoud not better to restrict the execution of some exe to only root userid.

Should I take some actions with these directories ? what is your point of vue ?
 
Back
Top