User per Domain

[martin.schaible]

Unlike other control panels, DirectAdmin uses a single Linux account for the user—and consequently for all their websites. I consider this a bad practice from a security standpoint.

Just recently, we had a case where a WordPress installation was compromised. The hacker then used one of the customer's subdomains for a spam campaign.

There should be a dedicated Linux user for each domain.

What do you think about this?

Cheers!

 

[romans]

You can create User Package and allow only 1 domain there. In that case every DA user will have only 1 domain. So, I do not see any problem with that.

 

[martin.schaible]

And then add an extra user if he needs a second domain?

 

[romans]

You can change the package for that user with more domains then. DA Panel is developed and works in such way and it will not create separate Linux user for each domain.

 

[martin.schaible]

I know. really bad.

 

[Richard G]

Unlike other control panels,

I presume you are talking about free panels? Because cPanel does this the same way as DA. So it's not that bad and CP is way bigger and more expensive.
Only Plesk creates a user per webspace, but they use a complete different setup anyway. And DA can do that too.

I know. really bad.

Why? You can just create a user for every domain if you want that, just like with Plesk.
And it can't be that bad if the biggest professional panel does it the same way.
On one side -if- you get hacked it is bad. But if a user has 5 domains, benefit is that he does not need to remember all 5 user accounts with all 5 different passwords.

And then add an extra user if he needs a second domain?

Yes, create a new user account, no problem there. You can have as many user accounts if you want.

 

[Richard G]

it will not create separate Linux user for each domain.

You can just create a new user account and put the new domain in there. No problem.