Enduser access to Imunify and ignore list problem

[instance1]

Hello,

I see in the latest update of Imunify customers have access to setup ignore paths themselves in cPanel so that the scanner ignores the paths/files/folders.

What if there is a hacker/fake order done and they login to cPanel and setup ignore paths for their public_html folder?
Then they start uploading files/folders with phising content and misuse the account?

Have you thought of that and the complications that can do to the server?
How can we as admins find these accounts and what should we do in such cases?

I think you need to think trough such cases and find a better way to handle those.

[apb]

> How about adding a control for admin to restrict this release/ignore function to selective end user only?

A task with internal id DEF-6276 has been created to address this issue. You can track Imunify360 updates in our blog at https://www.cloudlinux.com/imunify36...ifysensor-blog