Jailshell in cPanel: What It Is and How to Manage It (2027)

March 1, 2013 • vps9 admin

Summarize this blog on:

ChatGPT Perplexity Claude AI Google AI

Jailshell

When you try to run some commands in console, jailshell enabled user accounts on cPanel server give this error sometimes.

-jailshell: fork: Resource temporarily unavailable

This is a bug in cPanel’s jailshell. Commands such as ls, cat etc returns this error.

To correct this error:

  1. Login to WHM
  2. Suspend the account which has this issue
  3. Unsuspend the account with the issue
  4. Jailshell of the account can be reset by Suspend/Unsuspend of account which removes the error.

What Is Jailshell?

Jailshell is a restricted shell environment in cPanel/WHM. When a hosting account has jailshell access, the user can log in over SSH but only sees their own home directory and a limited set of commands. It protects the server and other accounts from mistakes or abuse by a single user.

Why Use It

  • Security: users cannot browse other accounts’ files or system folders.
  • Stability: a restricted shell reduces the risk of accidental damage.
  • Control for resellers: you can give customers SSH for tasks such as Git, Composer or WP-CLI without handing out full root access.

Shell Types in WHM

  • Jailed shell: restricted access, recommended for customers.
  • Normal shell: full shell with fewer restrictions, for trusted users only.
  • Disabled: no SSH access.

How to Change a User’s Shell

  1. Log in to WHM as root or as a reseller with the right permissions.
  2. Open Manage Shell Access.
  3. Select the account and choose Jailed Shell, Normal Shell or Disabled.
  4. Save the change, then test an SSH login with the account.

Troubleshooting

  • Command not found: a jailed account has a limited toolset, so some commands are unavailable by design.
  • Cannot log in: check the shell is not disabled and that the account is not suspended.
  • Tool missing for a task: ask your host to review jail contents, or move trusted users to a normal shell.

Best Practices

  • Use jailed shell by default and grant normal shell only when you trust the user.
  • Use SSH keys with a passphrase instead of passwords.
  • Keep cPanel updated for the latest security fixes.

Frequently Asked Questions

Is jailshell completely secure?

It greatly limits access, but it is one layer. Keep software patched and use strong credentials as well.

Can I give customers SSH safely?

Yes. Jailed shell is the standard way to do it on shared and reseller hosting.

Need full control?

A VPS with root access gives you the whole environment. See our best VPS hosting options.

Pro Tips and Best Practices

Review shell access quarterly

List accounts with shell access and remove it for users who no longer need it.

Prefer key authentication

SSH keys protect against password guessing, which is the most common attack on SSH.

Change the SSH port carefully

A non-default port reduces noise from scanners, but it is not a substitute for strong authentication.

Use fail2ban or CSF

Block repeated failed logins automatically.

Log and review

Check SSH logs for unusual logins from unfamiliar IPs.

Separate trusted users

Give normal shell only to staff you trust and keep customers in jailshell.

Explore more help in our hosting blog, compare our best VPS hosting plans, or contact our team if you would like help applying these steps on your server.