CageFS and SSH

[sahostking]

Hi,

Would like to find out how secure CageFS and SSH is using CloudLinux.

Could this still occur if the above is used? http://www.cloudlinux.com/blog/clnews/sshd-exploit.php

Thanks

[iseletsk]

Of course it can. This is not what CageFS protects against.
This vulnerability was tracked to keylogger -- hackers had root password for bunch of servers due to keylogger on some other servers.

[sahostking]

Oh ok I misunderstood it then. So If we enable Shell Access for all our clients and as we on CageFS it should be secure enough for us to continue offering this? We currently only enable it upon request but would like to remove that support part from requests if it is safe to just enable it for all accounts by default.

[iseletsk]

Yes, it should be secure to offer ssh access to your customers.