{"id":1458,"date":"2013-06-05T12:20:03","date_gmt":"2013-06-05T16:20:03","guid":{"rendered":"http:\/\/blog.funio.com\/fr\/?p=1458"},"modified":"2013-06-27T13:44:35","modified_gmt":"2013-06-27T17:44:35","slug":"un-ajout-a-notre-eventail-de-modules-de-securite-cagefs","status":"publish","type":"post","link":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/","title":{"rendered":"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS"},"content":{"rendered":"<p>Dans un effort continu d&#8217;am\u00e9liorer la s\u00e9curit\u00e9 de nos serveurs, nous d\u00e9ployons graduellement un module offert par CloudLinux (le syst\u00e8me d&#8217;op\u00e9ration que nous utilisons) qui se nomme CageFS. Ce module nous permet d&#8217;isoler davantage les espaces d&#8217;h\u00e9bergement les uns des autres, pr\u00e9venant ainsi l&#8217;acc\u00e8s \u00e0 l&#8217;information d&#8217;un compte h\u00e9berg\u00e9 sur nos serveurs par un compte malveillant.<\/p>\n<p>Au fil des ann\u00e9es, nous avons mis en place des mesures de s\u00e9curit\u00e9 sur nos serveurs qui effectuent des t\u00e2ches similaires \u00e0 CageFS. L&#8217;ajout et l&#8217;utilisation du module CageFS remplace certaines de ces mesures de s\u00e9curit\u00e9 et standardise notre approche, nous permettant ainsi d&#8217;\u00eatre plus efficace lors de la gestion de nos m\u00e9thodes de pr\u00e9ventions.<\/p>\n<h2>Aspects de s\u00e9curit\u00e9 de CageFS<\/h2>\n<p><b><\/b>Principalement, CageFS nous permet de limiter l&#8217;impact que peut avoir l&#8217;utilisation malveillante d&#8217;un compte sur nos serveurs. Voici quelques aspects de ce module :<\/p>\n<ul>\n<li>Il emp\u00eache l&#8217;acc\u00e8s aux fichiers\/r\u00e9pertoires ayant des permissions mal configur\u00e9es sur d&#8217;autres comptes<\/li>\n<li>Il permet de cacher les processus en cours d&#8217;utilisation par d&#8217;autres utilisateurs<\/li>\n<li>Il restreint certaines commandes que nous avons d\u00e9termin\u00e9 comme \u00e9tant malveillantes<\/li>\n<\/ul>\n<p>Par exemple, CageFS est parfait pour palier aux r\u00e9percussions de piratage de comptes ayant WordPress, o\u00f9 un script malveillant serait ins\u00e9r\u00e9 dans le compte par une faille de s\u00e9curit\u00e9 de WordPress. Ce script se mettrait ensuite \u00e0 effectuer des d\u00e9tections sur le serveur pour y trouver d&#8217;autres comptes o\u00f9 les permissions seraient mal configur\u00e9es. CageFS restreint donc le script malveillant au compte dans lequel il se trouve et l&#8217;emp\u00eache d&#8217;avoir acc\u00e8s \u00e0 de l&#8217;information sur les autres comptes du serveur.<\/p>\n<h2>Aucun impact n\u00e9gatif pr\u00e9vu<\/h2>\n<p>Pour d\u00e9finir notre configuration de CageFS, nous avons identifi\u00e9 les commandes les plus utilis\u00e9es sur nos serveurs par nos clients et nous nous sommes assur\u00e9 qu&#8217;elles n&#8217;\u00e9taient pas bloqu\u00e9es par CageFS. Pour cette raison, nous ne nous attendons pas \u00e0 ce que nos clients subissent de r\u00e9percussions n\u00e9gatives suite au d\u00e9ploiement de CageFS. \u00c0 moins que vous ne soyez une personne qui aimait observer les informations d&#8217;utilisation du serveur, et dans un tel cas, nous sommes d\u00e9sol\u00e9 de vous apprendre que ces jours sont maintenant termin\u00e9s.<\/p>\n<p>Malgr\u00e9 toutes nos pr\u00e9cautions, si vous rencontrez des difficult\u00e9s en lien avec vos scripts ou tout autre comportement \u00e9trange, veuillez\u00a0<a href=\"http:\/\/hub.funio.com\/assistance\/\">communiquer avec notre \u00e9quipe<\/a>\u00a0de soutien technique imm\u00e9diatement.<\/p>\n<p>Pour les curieux, la documentation sur\u00a0<a href=\"http:\/\/docs.cloudlinux.com\/index.html?cagefs.html\">CageFS se trouve ici<\/a>. Bonne lecture (tr\u00e8s technique)!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dans un effort continu d&#8217;am\u00e9liorer la s\u00e9curit\u00e9 de nos serveurs, nous d\u00e9ployons graduellement un module offert par CloudLinux (le syst\u00e8me d&#8217;op\u00e9ration que nous utilisons) qui se nomme CageFS. Ce module nous permet d&#8217;isoler davantage les espaces d&#8217;h\u00e9bergement les uns des autres, pr\u00e9venant ainsi l&#8217;acc\u00e8s \u00e0 l&#8217;information d&#8217;un compte h\u00e9berg\u00e9 sur nos serveurs par un compte [&#8230;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,21],"tags":[7,64],"class_list":["post-1458","post","type-post","status-publish","format-standard","hentry","category-funio","category-infrastructures","tag-default","tag-httpmedia-funio-comimageskbblogcloudlinux-gif"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS &#8212; Funio Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS &#8212; Funio Blog\" \/>\n<meta property=\"og:description\" content=\"Dans un effort continu d&#8217;am\u00e9liorer la s\u00e9curit\u00e9 de nos serveurs, nous d\u00e9ployons graduellement un module offert par CloudLinux (le syst\u00e8me d&#8217;op\u00e9ration que nous utilisons) qui se nomme CageFS. Ce module nous permet d&#8217;isoler davantage les espaces d&#8217;h\u00e9bergement les uns des autres, pr\u00e9venant ainsi l&#8217;acc\u00e8s \u00e0 l&#8217;information d&#8217;un compte h\u00e9berg\u00e9 sur nos serveurs par un compte [...]\" \/>\n<meta property=\"og:url\" content=\"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/\" \/>\n<meta property=\"og:site_name\" content=\"Funio Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/FunioHosting\" \/>\n<meta property=\"article:published_time\" content=\"2013-06-05T16:20:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2013-06-27T17:44:35+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@funiohosting\" \/>\n<meta name=\"twitter:site\" content=\"@funiohosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/#article\",\"isPartOf\":{\"@id\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS\",\"datePublished\":\"2013-06-05T16:20:03+00:00\",\"dateModified\":\"2013-06-27T17:44:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/\"},\"wordCount\":458,\"commentCount\":0,\"keywords\":[\"Default\",\"http:\\\/\\\/media.funio.com\\\/images\\\/kb\\\/blog\\\/cloudlinux.gif\"],\"articleSection\":[\"Funio\",\"infrastructures\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/\",\"url\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/\",\"name\":\"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS &#8212; Funio Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.funio.com\\\/fr\\\/#website\"},\"datePublished\":\"2013-06-05T16:20:03+00:00\",\"dateModified\":\"2013-06-27T17:44:35+00:00\",\"author\":{\"@id\":\"\"},\"breadcrumb\":{\"@id\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/2013\\\/06\\\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blog.funio.com\\\/fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.funio.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/blog.funio.com\\\/fr\\\/\",\"name\":\"Funio Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.funio.com\\\/fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"\",\"url\":\"http:\\\/\\\/blog.funio.com\\\/fr\\\/author\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS &#8212; Funio Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/","og_locale":"en_US","og_type":"article","og_title":"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS &#8212; Funio Blog","og_description":"Dans un effort continu d&#8217;am\u00e9liorer la s\u00e9curit\u00e9 de nos serveurs, nous d\u00e9ployons graduellement un module offert par CloudLinux (le syst\u00e8me d&#8217;op\u00e9ration que nous utilisons) qui se nomme CageFS. Ce module nous permet d&#8217;isoler davantage les espaces d&#8217;h\u00e9bergement les uns des autres, pr\u00e9venant ainsi l&#8217;acc\u00e8s \u00e0 l&#8217;information d&#8217;un compte h\u00e9berg\u00e9 sur nos serveurs par un compte [...]","og_url":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/","og_site_name":"Funio Blog","article_publisher":"https:\/\/www.facebook.com\/FunioHosting","article_published_time":"2013-06-05T16:20:03+00:00","article_modified_time":"2013-06-27T17:44:35+00:00","twitter_card":"summary_large_image","twitter_creator":"@funiohosting","twitter_site":"@funiohosting","twitter_misc":{"Written by":"","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/#article","isPartOf":{"@id":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/"},"author":{"name":"","@id":""},"headline":"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS","datePublished":"2013-06-05T16:20:03+00:00","dateModified":"2013-06-27T17:44:35+00:00","mainEntityOfPage":{"@id":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/"},"wordCount":458,"commentCount":0,"keywords":["Default","http:\/\/media.funio.com\/images\/kb\/blog\/cloudlinux.gif"],"articleSection":["Funio","infrastructures"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/#respond"]}]},{"@type":"WebPage","@id":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/","url":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/","name":"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS &#8212; Funio Blog","isPartOf":{"@id":"https:\/\/blog.funio.com\/fr\/#website"},"datePublished":"2013-06-05T16:20:03+00:00","dateModified":"2013-06-27T17:44:35+00:00","author":{"@id":""},"breadcrumb":{"@id":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/blog.funio.com\/fr\/2013\/06\/un-ajout-a-notre-eventail-de-modules-de-securite-cagefs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.funio.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Un ajout \u00e0 notre \u00e9ventail de modules de s\u00e9curit\u00e9 : CageFS"}]},{"@type":"WebSite","@id":"https:\/\/blog.funio.com\/fr\/#website","url":"https:\/\/blog.funio.com\/fr\/","name":"Funio Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.funio.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"","url":"http:\/\/blog.funio.com\/fr\/author\/"}]}},"_links":{"self":[{"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/posts\/1458","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/comments?post=1458"}],"version-history":[{"count":5,"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/posts\/1458\/revisions"}],"predecessor-version":[{"id":1582,"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/posts\/1458\/revisions\/1582"}],"wp:attachment":[{"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/media?parent=1458"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/categories?post=1458"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.funio.com\/fr\/wp-json\/wp\/v2\/tags?post=1458"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}