Înapoi la jurnalul de modificări
Backend-ul panoului

v1.0.565

Remediere de securitate Lansare de securitate Lansată pe 23 octombrie 2026

Per-account PHP protection with AppArmor and SELinux, Cloudflare R2 backups, Docker PHP image updates and security fixes

Funcții noi

5
  • AppArmor (Debian / Ubuntu): per-account protection for customer PHP with Off, Learning and Protection modes. Every hosting account gets its own profile, and the panel's own PHP services (phpMyAdmin, Roundcube) are no longer bound to a customer's profile.
  • SELinux (AlmaLinux / Rocky Linux): Panelica keeps working with SELinux on. Security > SELinux turns it on step by step (prepare, reboot, relabel while the server runs, enforcing) and can loosen it or turn it off again. SELinux stays off on new installations, and nothing changes on servers where it is off.
  • SELinux: per-account PHP protection with Off, Learning and Protection modes. Each account gets its own category, so one account's PHP cannot read another account's files or the panel's secrets. Protection needs SELinux in enforcing mode and is switched on from Learning; if PHP stops answering, the change is undone.
  • Backups: Cloudflare R2 as a remote storage provider (account ID, data location, storage class). Pasting the bucket's S3 API address fills in the fields.
  • Docker PHP 5.6 to 7.4: PHP Runtimes shows when a newer image is available, and ROOT can update the image from the panel. The new image is checked and sites are restarted one by one; if a site stops answering, the previous image is put back. A 'Revert to previous image' action is available as well.

Îmbunătățiri

6
  • AppArmor: after every mode or rule change the account's PHP is checked with a real request; if PHP does not answer, the change is undone automatically. Protection can be switched on only from Learning. Without the license feature, accounts can still be switched off.
  • AppArmor: the old per-domain profiles are retired on the first start. They are unloaded and moved to var/backups/apparmor-retired, and an account that had an enforcing old profile starts in Learning mode.
  • Backups (S3, S3-compatible, R2, Google Cloud Storage): a new destination writes into a folder named after this server by default, so servers that share a bucket do not see or overwrite each other's backups. Existing destinations keep their folder.
  • Backups: deleting a destination together with its bucket asks for the bucket's name. A wrong secret key is reported as a wrong key instead of access denied, an R2 access error mentions the data location, and an empty remote backup list is returned as [] instead of null.
  • API and CLI: the external API has /v1/apparmor, /v1/selinux and /v1/selinux/php endpoints, listed with their parameters and responses in the endpoint catalogue; the CLI has panelica security apparmor and panelica security selinux (with selinux php).
  • Database migrations 000635 (AppArmor accounts), 000636 (Docker PHP builds) and 000637 (SELinux accounts).

Remedieri de erori

9
  • SELinux: Panelica services installed while SELinux was off are relabelled and restarted when SELinux is turned on, so the relabel no longer fails on files they rewrote.
  • Docker PHP: Manage > Custom Extensions builds failed for everyone with 'value too long'. Fixed with database migration 000636.
  • Docker PHP: the panel no longer switches a PHP version to a leftover failed build at startup, and refreshing the PHP wrapper keeps the image it runs.
  • Updates: symbolic and hard links inside service packages are now installed. They were skipped before, which left for example Postfix smtp / nqmgr and BIND's libdns.so on the previous version. Links are backed up and restored on rollback.
  • Updates: rolling back panelica-server also puts back the previous version's web server templates, so domains can be created after a rollback.
  • Updates: a rebuild label such as nginx 1.31.6.1 is no longer lowered to 1.31.6 on new installations, so the panel stops offering an update that is already installed.
  • Mail antivirus: when there is not enough free memory, turning on mail virus scanning is refused with a clear message instead of leaving the server unresponsive. On servers with less than 8 GB of memory, ClamAV is set once to use less memory while it reloads its database; later changes made by the administrator are kept.
  • Domains: a domain creation that fails midway no longer leaves an nginx or PHP-FPM configuration behind that broke the next domain creations.
  • New installations: seven texts of the permission pages that were missing from the database are added.

Remedieri de securitate

2
  • Removes a debugging script that earlier installation packages left in the webmail folder (services/roundcube/test_config.php); it showed the webmail database password without a login. On startup the script is deleted and the webmail database password is replaced with a new random one.
  • Backups: custom S3 endpoint addresses are checked when connecting. Cloud metadata and link-local addresses are always refused; local and private network addresses are refused for destinations that do not belong to ROOT.

Lansări recente

Toate versiunile
Vedeți demonstrația