Re: Linux Web Server Hardening (LAMP + Wiki)

You will need to get up to speed on selinux. ACLs, chroot jails and 
iptables alone don't cut it.

LAMP is well supported by the default selinux rules on every major Linux 
distro. You will have to learn how to tighten the security rules, such 
as type enforcement yourself though.

Mike

On 01/25/2013 04:31 PM, Jeffrey Walton wrote:
> Hi All,
>
> Is anyone aware of a hardening guide for a Linux LAMP server with a
> Wiki component?
>
> I have an older Linux Server hardening book, but nothing recent. I
> have not seen a Wiki hardening document.
>
> Thanks in advance,
>
> Jeff
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
>
>
>


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------