[cobalt-security] newbie question: RaQ2, group size limitation, admin lack of FTP access, and package removal

["Regarding Cobalt-related issues from Albert C." <itacroft-cobalt@xxxxxxxxxxxxxxxx>]

Problem:

 

* Cobalt RaQ2 server with > 60 virtual sites.

* All virtual sites are owned by a web-hosting client with multiple developers, so a single or small group of users to administer all sites would be optimal.

* Have applied all patches (the most recent, security patches 2.91, 2.8. 2.9, 2.95, and all security point patch 2.97).

* After applying the most recent patches admin can no longer in FTP move above the /home/sites/home directory.

* I cannot see any apparent differences in the /etc/proftpd.conf file.

 

Questions:

 

1) Is there a good way to get around the group size limitation which occurs with the number of site groups on the server?

2) What would be the recommended manner for removing one or more of the most recent patches?

3) What problems could I expect by removing the most recent 5 patches?

 

I have looked through a good bit of the archives for the developers, security, and users lists, and wile I see parts of the solutions, it is still a little unclear to me the exact answers to these questions, although that may be a result of my newbieness.

 

Any assistance that could be provided would be greatly appreciated.