All Requests
Under Review Core Platform

Per-account container isolation

Joti P. 0 comments

Request

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

Upvote This Request Help the product team understand how many clients need this.

Discussion

No Comments Yet

Be the first to add context to this request.