|
| News |
|
New Security policy in cPanel 11.28 |
| 11-06-2010 |
This version of cpanel has new features, that makes users to customize their server.
In version 11.28, cPanel provides a new, 2-part feature that allows server owners to choose how to secure their cPanel servers. The first part consists of the 3 security policies provided with cPanel/WHM version 11.28.
These policies allow server owners to:
Limit logins to verified IP addresses: In the new version users from unrecognized IPs to answer security questions before they can access the server's cPanel, WHM, and webmail interfaces.
Specify a minimum password strength.
Specify a maximum password age: Users can set a maximum password age. (Once the password hits that age, it must be reset.)
You can enable these 3 security policies on the WHM Configure Security Policies screen.
In version 11.28, cPanel provides a plugin-based security policy system (or “framework”). Its purpose is to allow the root user to add or remove policies as desired, even while the system is running. The individual policy modules are loaded and exercised through a defined API.
This approach allows the root user to extend the supported policies in the future, without having to make major changes to the cPanel and WHM code.
There are 2 ways to enable a security policy. The correct way is to access the security policy configuration interface from the Security Center > Configure Security Policies menu option in WHM. This interface provides checkboxes for each security policy plugin found on the system.
As an alternative to the official interface, a policy may be enabled or disabled through modification of the /var/cpanel/cpanel.config file. This approach is not recommended.
Normally, the security policies are only applied to cPanel, WHM, and webmail access to the system. However, the Configure Security Policies interface in WHM allows the root user to apply the security policies to the DNS cluster interface, as well as XML API and JSON API requests.
Reference : http://www.cpanel.net/ |
| Remember, we listen to you! Any comments/suggestions should be sent to info@serverbuddies.com. |
|
| |
|
|
