This PR addresses privately reported issue and tries to restricts root/UID 0 user mutations and Custom Commands definition editing to full, non-safe Webmin admins. This closes privilege-escalation paths for restricted operators while preserving execution of pre-approved Custom Commands under existing cmds ACLs.
Documentation | FAQ | Security | Screenshots | Forum
About
Webmin is a web-based system administration tool for Unix-like servers, and services with about 1,000,000 yearly installations worldwide. Using it, it is possible to configure operating system internals, such as users, disk quotas, services or configuration files, as well as modify, and control open-source apps, such as BIND DNS Server, Apache HTTP Server, PHP, MySQL, and many more.
Usability can be expanded by installing modules, which can be custom made. Aside from this, there are two other major projects that extend its functionality:
- Virtualmin is a powerful, flexible, most popular, and most comprehensive web-hosting control panel for Linux, and BSD systems, with over 150,000 installations worldwide. It is available in an open-source community-supported version, and a more feature-filled version with premium support;
- Usermin presents and controls a subset of user-centred features, rather than administrator-level tasks.
Webmin includes 116 standard modules, and there are at least as many third-party modules.
Requirements
Perl 5.10 or higher.
Installation
For detailed installation instructions check our guide on webmin.com/download page.
Development
Lead developer
Developers
Contributors
License
Webmin is released under the BSD License.

