New SolusVM Beta Build Security Update Rev13 8/27/2013

[ryanarp]

I haven't seen this posted yet, so thought I would since it contains security enhancements from audit.

Revision 13 (27 August 2013) Beta Build

• Added Client, Reseller and Admin single session support. Default is ON but can be disabled from the admin area Configuration » Settings » Security.
  
• Added <on_poweroff>destroy</on_poweroff> and <on_reboot>restart</on_reboot> to KVM xml config files.
  
• Fixed length of virtual server hostnames.
  
• Changed the way disabling a KVM virtual servers VNC works due to networking issues. VNC's are now spawned locally when disabled.
  

This release also contains security enhancements as per the external audit recommendations.



http://docs.solusvm.com/release_versions_beta#revision_13_27_august_2013

 

[rds100]

Hmm nothing on their blog. No tweet. No email...

 

[ryanarp]

Yea I thought it was strange I didn't see it posted anywhere yet, I just happened upon it.

 

[rds100]

Oh, it's the beta release, that's why. Nothing yet for the "stable" branch.

 

[ryanarp]

Ah, will change topic title to reflect its just for those who are living life on the edge.

 

[Nick_A]

Yeah, I was wondering why they posted an update without posting on the blog. Somewhat concerning.

 

[Francisco]

Is there still providers with their SolusVM's disabled?

Or has everyone enabled theirs now?

Francisco

 

[rds100]

Ours is disabled still. Waiting to see the "fixed" version SolusVM releases.

By the way, does anyone else have a problem with rdns4 support in SolusVM being broken in the recent version? I've no idea when it broke actually.

 

[Francisco]

Ours is disabled still. Waiting to see the "fixed" version SolusVM releases.

By the way, does anyone else have a problem with rdns4 support in SolusVM being broken in the recent version? I've no idea when it broke actually.

I thought you guys had your own panel?

Francisco

 

[rds100]

Nope, VPSes are controlled by SolusVM. Although we did add some small custom things to it (like working rdns6 support - more than two years ago and still using mine instead of theirs)

 

[Aldryic C'boas]

Nope, VPSes are controlled by SolusVM. Although we did add some small custom things to it (like working rdns6 support - more than two years ago and still using mine instead of theirs)

Don't tell them that... they'll accuse you of decompiling their panel and suspend your license (like they did to us).. and when you do show them your code to prove everything's legit, they'll steal it and use it to fix their own broken mess (like they also did to us -_-)

 

[rds100]

They can try but... i'm not a PHP guy, i wrote it in perl They can have it if they want, no problem ;-)

 

[Aldryic C'boas]

Ahahaha... I actually kinda hope that happens now (not that they suspend you, of course)... as bad as their PHP was, I shudder to imagine what would happen if they tried converting perl XD

 

[Zen]

Don't tell them that... they'll accuse you of decompiling their panel and suspend your license (like they did to us).. and when you do show them your code to prove everything's legit, they'll steal it and use it to fix their own broken mess (like they also did to us -_-)

mysql_

 

[MannDude]

Is there still providers with their SolusVM's disabled?


Or has everyone enabled theirs now?


Francisco

Still got it disabled here.

 

[Damian]

Public access disabled for us.

 

[Francisco]

@Damian - I'm assuming you just use the WHMCS module to give most controls?

Francisco

 

[Damian]

@Damian - I'm assuming you just use the WHMCS module to give most controls?


Francisco

We're using the broken-ass ModulesGarden Solus module. It's very broken-ass, but one of the benefits over the Solus-provided module is that it has a mechanism for console access, which means we could continue to sell KVMs and people could set up their OS on them. The module doesn't show KVM ISOs, only KVM templates, so I have a KVM server sitting in San Diego with absolutely no clients on it because I can't provide them with a good interface to set up their shit. FML.

 

[Aldryic C'boas]

Guessing they use ioncube on their source?

 

[sv01]

Is there still providers with their SolusVM's disabled?

handsomehost (hudsonvalleyhost) one of them