Page tree
Skip to end of metadata
Go to start of metadata

This document is for a previous release of cPanel & WHM. To view our latest documentation, visit our Home page.

For cPanel & WHM 11.42

(Home >> Account Functions >> Manage Shell Access)

Overview

This feature allows you to manage which of your accounts are able to access your server remotely through a command line interface such as Terminal for Mac® or PuTTy for Windows®.

This can be very beneficial to your users; however, this comes with basic security risks that should be considered before granting users complete shell access. We recommend providing your users with jailed shell (sometimes seen as jailshell) access. This setting bars the user from running a number of commands.

Remember:

An account's package determines whether the account has shell access. Therefore, changing the account's permission to access a shell will set the account's package to undefined. The undefined package is a reserved package name that can contain different values for different users.

How do I enable or disable shell access for specific users?

To use this feature, simply make your desired selections in the available table. You will need to cross reference the User column with the Normal ShellJailed Shell, and Disabled Shell columns.

  • To grant a user access to a normal shell, find the user to whom you wish to grant normal shell access and select the radio button that corresponds to that user in the Normal Shell column.
  • To grant a user access to a jailed shell, find the user to whom you wish to grant jailed shell access and select the radio button that corresponds to that user in the Jailed Shell column.
  • To disable a user's shell access, find the appropriate user in the list and select the radio button that corresponds to that user in the Disabled Shell column. 

    Note:

     An account with a disabled shell can still use SFTP. To disable an account's ability to use SFTP, you must change the user’s shell to /bin/false. Run the following via the command line as the root user: usermod -s /bin/false username where username is the account for which to disable SFTP. 

Can I enable or disable shells for all of my accounts? 

  • To grant all of your accounts access to a normal shell, click the appropriate Apply to all button beneath the Normal Shell heading.
  • To grant all of your accounts access to a jailed shell, click the appropriate Apply to all button beneath the Jailed Shell heading.
  • To disable shell access to all of your accounts, click the appropriate Apply to all button beneath the Disabled Shell heading.

Related documentation