Due to static pages being retrieved by apache user (or nobody, depending on your install) -- it was very hard to protect against.Some hosts used SymLinksIfOwnerMatch directive instead -- but that din't really work, as race condition (when symlink is made to point to hacker's file, and then to good user's file) makes it very simple to exploit.As par...

New version of CageFS is available from our updates-testing repository.Changelog:cagefs-5.5-6.9CAG-444: filtered out -C and -D options of sendmail and exim;CAG-414: created wrapper for exim to permit safe parameters only.To update run the command:yum update cagefs --enablerepo=cloudlinux-updates-testing

New beta version of CageFS 3 available. New version has following fixes and improvements following issues:Fixes race condition that would cause serving wrong /etc/passwd or /etc/group fileAbility for sendmail to send mail when eximmailtrap is enabledWhite listed user/groups that can see additional users in password and group filesFixed permissions ...

We have made several improvements and bug fixes for CageFS:exim.cfg: removed /var/log/exim_mainlog, /var/log/exim_paniclog, /var/log/exim_rejectlogcpanel.cfg: added templates for "suspended account" pagecpanel.cfg: added symlink /usr/lib/php.ini (fixing the bug of when no php.ini was loaded)cpanel.cfg: added /usr/local/safe-binadded users nobody, m...

Second version of CageFS 3.0 beta was related. This version:Adds automatic detection for LiteSpeed webserver (stand-alone ony)Fixes caching bug in CageFS-FUSE etcfsImproves stability and performance of CageFS-FUSEFixes various bugs related to mounting/unmounting of filesystemsCorrect handing of umaskTo update:# yum update cagefs cagefs-fuse lve lib...

New updated version of CageFS is available from our updates-testing repository. cagefs-5.5-6.33 Release notes: Added /usr/local/cpanel/var read-write mount to enable /usr/local/cpanel/bin/process_ssl_pending_queue command functioning inside CageFS. Changelog: CAG-560: added /usr/local/cpanel/var read-write mount to CageFS. To update run the command...

We have made several improvements and bug fixes for CageFS:exim.cfg: removed /var/log/exim_mainlog, /var/log/exim_paniclog, /var/log/exim_rejectlogcpanel.cfg: added templates for "suspended account" pagecpanel.cfg: added symlink /usr/lib/php.ini (fixing the bug of when no php.ini was loaded)cpanel.cfg: added /usr/local/safe-binadded users nobody, m...

New updated CloudLinux 7 kernel (version 3.10.0-427.18.2.lve1.4.10) is available from our updates-testing repository. Changelog since 3.10.0-427.10.1.lve1.4.9: rebased to vzkernel-rh7-3.10.0-327.18.2.vz7.14.12;fix for CVE-2016-4581;various fixes and code clean-up in lve module. To install new kernel please run the following command: yum install ker...

New CloudLinux documentation is available at http://docs.cloudlinux.com/This is still work in progress, but it has lots of new features covered.