Modules security // Changes

[bbspike]

Im not a programmer nor am I security specialist

But I do want to contribute. So if you need any server resources or real life test environments just say.

I also think sentora could use integration of:

- proper logrotate
- fail2ban integration
- php compiling
- nginx

[Me.B]

Please check that your modules are ok with this:

http://forums.sentora.org/showthread.php?tid=2613

This is how modules should be.

[Me.B]

Im not a programmer nor am I security specialist

But I do want to contribute. So if you need any server resources or real life test environments just say.

I also think sentora could use integration of:

- proper logrotate
- fail2ban integration
- php compiling
- nginx

Yep I think logrotate will be a priority with fail2ban. Mostly those in installer.

Php compiling will wait until full rewrite of web module.

For nginx check this new thread so we discuss it more.

http://forums.sentora.org/showthread.php?tid=2614

[bbspike]

Im not a programmer nor am I security specialist

But I do want to contribute. So if you need any server resources or real life test environments just say.

I also think sentora could use integration of:

- proper logrotate
- fail2ban integration
- php compiling
- nginx

Yep I think logrotate will be a priority with fail2ban. Mostly those in installer.

Php compiling will wait until full rewrite of web module.

For nginx check this new thread so we discuss it more.

http://forums.sentora.org/showthread.php?tid=2614

I replyed some in the designtatd threads.

I forgot one thing to mention. Sentora really should stop saving the FTP passwords in plain text.

[lino69]

Yes, I do agree. very nice

[hrace009]

Do you agree also if we merge your code in the core?

well, i am not a developer, i am just sentora user
but if i am a developer, i agree.

btw i want to add suggestion, it will really good if someone can create and integrated with mod_security + mod_ruid2 so it can run per user group, and more secure. Also with php version switcher and php fpm.
and for php version swithcer, i recommended to use remi repo. since it easy to use.

but everything is up from sentora core developer.

[Nigel]

Why having a module for web forwarding? While we should already merge the main module with sub domains module.

Because Bobby made it that way @Me.b

If an Admin doesn't want to offer domain forwarding to his client he can lock it out of the system.

Would be intersting if we update later only the modules instead of the whole core. We could then release faster fixes for core modules instead of releasing the FULL core update as we do currently. I think we started thinking about it before we dropped it.

Yet another one of my ideas that was never implemented.

You need to update the module version of EVERY package first. But need to figure out which actual version the core modules are on, build the module repo store that's been promised for years now & have a module like Rustus' repo Browser as a core component, that way you can easily just update one module instead of having to update the entire core.

All my ideas got lost when you had me removed from being a staff member because your ideas were far fetched & went against what Sentora stood for.