Less spam in security advisor notifications

Nathan Lyle shared this idea ago

Needs Review

I get daily notifications from the security advisor on both of my servers, with the subject "New Security Advisor notifications with High importance", with the following message:

Apache vhosts are not segmented or chroot()ed. Enable “mod_ruid2” in the “EasyApache 4” area, enable “Jail Apache” in the “Tweak Settings” area, and change users to jailshell in the “Manage Shell Access” area. Consider a more robust solution by using “CageFS on CloudLinux”. Note that this may break the ability to access mailman via Apache.

However, none of my accounts have open shell access - they are mostly all disabled, with a few set to jailed access. Yet I constantly get this warning. And the solution appears to be to either enable an "experimental" feature in WHM, or spend more money on a different cPanel product. Since I have no accounts with open shell access, this should NOT be a "high importance" warning.

Since I have WHM set to push notify me of "high level" warnings, this means I get nightly alerts setting my phone's alarm off, only to find out it's the same irrelevant warning.

Could this please have something done about it?

I like this idea 0

Replies (1)

Nathan Lyle ●

To make it worse, I just had a notification pushing CageFS that WHM says is only Medium (rather than High) that got pushed through to my phone. I double checked, and the contact settings in WHM have it only set to send if it's High. So there's some issue with the Contact Manager as well, apparently.

LiteSpeed vhosts are not segmented or chroot()ed. Consider a more robust solution by using “CageFS on CloudLinux”.

Reply URL