Question Why is `plesk-ssh-terminal` running?

[klodoma]

From the CSF/LDF Firewall I start getting these notifications:
Time: Mon Sep 20 13:00:26 2021 +0200 Account: plesk-ssh-terminal Resource: Process Time Exceeded: 109277 > 1800 (seconds) Executable: /opt/psa/admin/plib/modules/ssh-terminal/libexec/plesk-ssh-terminal Command Line: /usr/local/psa/admin/plib/modules/ssh-terminal/libexec/plesk-ssh-terminal --listen /run/plesk-ssh-terminal/backend.sock --connect-to *:5022 PID: 3093395 (Parent PID:3093395) Killed: No

Afaik, I didn't enabled the plesk-ssh-terminal.

So, why is this running?

 

[Monty]

The SSH-Terminal extension is installed and enabled automatically since Plesk Obsidian 18.0.38, see:
Change Log for Plesk Obsidian

Also see:

How to disable root access via the SSH Terminal extension for the Plesk administrator?

Applicable to: Plesk for Linux Question The SSH Terminal extension is available in Plesk 18.0.37 and later. With this extension, the Plesk administrator can access the SSH console on behalf of t...

support.plesk.com

 

[Hangover2]

Actually this is an absolutely no-go what Plesk is doing here.

 

[klodoma]

Actually this is an absolutely no-go what Plesk is doing here.

I kind of agree. Or somehow make it more transparent and even simple to disable it.

 

[IgorG]

I kind of agree. Or somehow make it more transparent and even simple to disable it.

In my opinion, everything is done quite transparently: How to disable root access via the SSH Terminal extension for the Plesk administrator?

 

[Hangover2]

In our case this "auto-install" did on top lead to a broken SSH chrooted environment for our clients on a Debian 9 server. Override the passwords + update_chroot.sh did not help. As a quick-fix we did uninstall the extension to fix the issue. Not sure if we will make a bug report because we will not use the extension.

 

[klodoma]

In my opinion, everything is done quite transparently: How to disable root access via the SSH Terminal extension for the Plesk administrator?

I would agree that this should run if you install the Plesk extension, but it runs by "default" which I don't think it is nice. And in order to disable it, you have to go on every server and disable it. Maybe it has some benefits to run, didn't digged into it to deep.