How To Harden Cpanel?

[weblord]

You should configure the following in your WHM (CPanel):



Main >> Server Configuration >> Tweak Settings

[x] Prevent the user 'nobody' from sending out mail to remote addresses (php and cgi scripts generally run as nobody if you are not using phpsuexec and suexec respectively.)

[x] Track the origin of messages sent though the mail server by adding the X-Source headers (exim 4.34+ required)



Main >> Security >> Fix Insecure Permissions (Scripts)



Main >> Security >> Tweak Security

"Compilers are disabled for unpriviledge users"



Main >> Service Configuration >> Enable/Disable SuExec

suexec Status "enabled"



Main >> Account Functions >> Disable or Enable Demo Mode

Select from "Users" the "demo" account and click "Modify" then click "Disable" if it exists

why do you need to do this? so you minimize hacker's activities and exploits on your nix box.

I think access to Cron jobs should also be denied as many Shell commands can be executed using the cron jobs feature.

[weblord]

if "demo" mode is disabled there's no way for them to access your server if it's a trojan, try secure the temp
./securetmp
then reboot