Re: Linux Web Server Hardening (LAMP + Wiki)

Henri Salo <[email protected]> Mon, 28 Jan 2013 10:39:45 +0200
Newsgroups gmane.comp.security.basics
Message-ID <[email protected]>
On Fri, Jan 25, 2013 at 04:31:04PM -0500, Jeffrey Walton wrote:
> Is anyone aware of a hardening guide for a Linux LAMP server with a
> Wiki component?
> 
> I have an older Linux Server hardening book, but nothing recent. I
> have not seen a Wiki hardening document.
> 
> Thanks in advance,
> 
> Jeff

Setup RBAC, tripwire (or similar), ClamAV, backups and remember to update the wiki. Not trying to put the blame on anyone, but you could learn from this case a lot: http://wiki.python.org/moin/WikiAttack2013

If you need help with updating wiki software please send me an email and I can tell you about my open-source application, which helps this tasks at least for some administrators :)

--
Henri Salo

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------