Sentora - General Security Warning

[Vedran B]

is zsudo removed now or is still in use

And zsudo will be wiped out soon from sentora... that would close all those stories over that.

And we will plan to change the whole security model.

M B

Still in use.
Still safe to use thou

Until it is done a half mesure is to chown your sentora directories down to apache user and chmod them to 770 so sentora can still read and write all the config files but random system users cannot zsudo themselfs up to root or read the /etc/sentora config files and obtain plain text passwords.

Going to break some services