• The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

/etc/passwd file access for Plesk 12 and 11

R

Roadkill-NZ-

New Pleskian
Hey all,

I am just wondering if Plesk needs to have read access for everyone (rw-r--"r--") for the /etc/passwd file?

Can you please advise whether it needs this access to it? As locking it down can stop some potential security issues with PHP being able to access it when run in a Web browser.

So far testing I have done hasn't produced any noticeable effects with using Plesk.

I would expect that this might affect users when accessing SSH, but as Plesk has a user with higher access, this may not be a problem for a hosting server.

Cheers,

Roadkill-NZ-
 
You must log in or register to reply here.

Similar threads

R
Issue Problem with web application firewall - file extension is restricted by policy
Replies
3
Views
1K
Linulex
Linulex
K
Issue Dovecot backup/sync to second server fails - Error: auth-master: userdb lookup
Replies
0
Views
2K
kassi
K
S
Issue Getting 404 Not Found NGINX error, not able to access plesk and website went down after update
Replies
2
Views
1K
Dave W
Dave W
Hangover2
Input Plesk Obsidian 18.0.59 - stable enough for live deployment?
Replies
6
Views
2K
Hangover2
Hangover2
F
Resolved New FTP user becomes visual owner of all files of the webspace on Alma 8.x
Replies
7
Views
3K
stephanecottin
S
Back
Top