Tutte le richieste
In fase di revisione Core Platform

Per-account container isolation

Joti P. 0 commenti

Richiesta

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

Vota a favore di questa richiesta Aiuta il team di prodotto a capire quanti clienti ne hanno bisogno.

Discussione

Ancora nessun commento

Aggiungi per primo informazioni utili a questa richiesta.