SecureLinks
Kernel-only symlink-if-owner enforcement. Download, build, load, and apply via simuzo --securelinks. Auto-apply paths on boot and install when enabled.
Security for multi-tenant hosting
Layered controls that reduce cross-user risk and improve operational accountability.
Defense in depth
Multiple layers, one product
Isolation, kernel policy, observability, and rootless containers work together on shared nodes.
SimuzoFS jails
Filesystem isolation so accounts operate inside constrained views instead of the full host tree.
Audit trail
Security-relevant event logging with retention settings and a dedicated service for compliance workflows.
Process monitoring
Keep processes associated with the correct cgroups and maintain operational control of abusive workloads.
Rootless containers
Container Manager avoids granting host root; port publishing uses allocation and proxies rather than raw privileged binds.
Admin hygiene
API key scoping, debug levels, service controls, and task logs support safer day-2 operations.
SecureLinks
Kernel policy, not fragile userspace hooks
SecureLinks enforces symlink ownership rules in the kernel so unprivileged processes cannot follow foreign symlinks to sensitive targets—a classic multi-tenant risk class.
simuzo --securelinks status- Download prebuilt modules or build for your kernel
- Enable/disable and apply on boot paths
FAQ
Common questions
What is SecureLinks?
SecureLinks is a kernel module that enforces a symlink-if-owner policy: unprivileged users cannot follow symlinks they do not own, mitigating classic multi-tenant symlink races.
Does SecureLinks require a matching kernel build?
Yes. Modules are per uname -r. Simuzo can download a prebuilt module from the Softaculous mirror or build locally with kernel headers/devel.
How does this fit with SimuzoFS?
SimuzoFS constrains filesystem views; SecureLinks hardens symlink follow policy at the kernel; audit and process monitoring add operational accountability.
Ready to secure your hosting nodes?
Install Simuzo on your panel server, enable isolation and limits, and give users a safer multi-tenant environment.