What are the actual security issues with creating a mail domain/account for the admin user?

[evonet]

Thanks @eris

SOLUTION:

@eris

Create a php script with

<?php exec('sudo /usr/local/hestia/bin/v-change-user-password admin "newpassword" And upload it to /home/admin/web/domain.com/public_html And access via web Enough said...

AND RE: HOSTNAME

@eris

Because I don’t put a website on my hostname and we assume nobody does… If they do they should really move it to a different user.

AND RE: HOSTNAME + OTHER SECURITY ISSUES

@eris

Hostname can be under any user it really don’t matter how ever it is written so it creates under the admin user if it doesn’t exists…

There might be other security vulnerabilities to be found that gives shell access to the user running php / apache2 or nginx so that is why it always run any user with limited permissions…

It will be replaced anyway in the next major release…

AND SOULTION RE: HOSTNAME: FROM:

Is hestia created hostname web domain needed to issue SSL cert or for any other reason? Or is it fine to delete it?

Is hestia created hostname web domain needed to issue SSL cert or for any other reason? Or is it fine to delete it? Thanks!