while migrating to a new VPS I have noticed an oddity while setting up an admin user.
Since it may be considered a security issue, I am hestitant to post details.
After looking in the bug tracker and not finding the same issue, I was ready to post, however it appears that all posts become public.
Would it be possible to contact me via my forum email with instructions, or comment in this thread?
If you think you found a security issue, my suggestion would be to go to the Support link at the top of the page here, create a new support request – and to check the “Make post private” link, which makes it so that only the Virtualmin staff can see it.
Then we can work with you privately regarding the issue.
One issue I noticed is that by default all server administrators have shell access.