全部需求
审核中 Core Platform

Per-account container isolation

Joti P. 0 条评论

需求

WHost currently isolates each account as a Linux user in its own cgroup v2 slice. That covers resource limits well, but not filesystem visibility: an account can still read system configs and enumerate other users on the box. On cPanel and DirectAdmin that gap is normally closed with CloudLinux (CageFS). Since CloudLinux only integrates with a handful of established panels, WHost providers are unlikely to have that option, so the isolation has to come from the panel itself. Request: run each account in its own container, with its own filesystem view and service stack, the way Enhance does. Beyond the security case, it would also make multi-server deployments possible later, with roles spread across nodes. As a hosting provider evaluating WHost for multi-tenant shared hosting, this is the main thing that would decide it for us. Happy to test it in beta.

为此需求投票 帮助产品团队了解有多少客户需要此功能。

讨论

暂无评论

成为第一个为此需求补充背景信息的人。