Understanding mod_ruid2 and its compatibility issues with Imunify360 and CloudLinux

Issue

mod_ruid2 is an Apache module that enables web servers to run with the least privilege, allowing each request to run with the user's permissions. This improves security by isolating user processes and preventing unauthorized access. However, mod_ruid2 can cause compatibility issues with Imunify360 and CloudLinux components.

Environment

• Imunify360
• CloudLinux
• ModSecurity3

Solution

• To resolve compatibility issues between Imunify360 and mod_ruid2, you can create a configuration file to change the temporary directories used by ModSecurity and provide full access to all. Although this will pose significant risks and it is recommended to refrain from using it at all.
  
  
• Compatibility Issues with CloudLinux: mod_ruid2 is incompatible with some CloudLinux components, such as PHP Selector and CageFS. This incompatibility can be verified through the CloudLinux compatibility matrix documentation.
• In both scenarios, if you experience any issues, it is recommended to disable mod_ruid2.

Cause

mod_ruid2 is not compatible with Imunify360, please refrain from using mod_ruid2 along with Imunify360.

Using links

• https://docs.imunify360.com/ids_integration/#modsecurity-3-apache-limitations
• http://docs.cloudlinux.com/index.html?compatiblity_matrix.html