RE: Linux Web Server Hardening (LAMP + Wiki)

Wow, don't use Linux?
Any operating system can be insecure if you don't harden it appropriately.

@Jeff:
Check these out:
http://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/
http://benchmarks.cisecurity.org/


Matthew Ulm
Security Engineer
www.edelman.com
Desk: 312-297-6970 Cell: 773-746-6601


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Eric Furman
Sent: Monday, January 28, 2013 2:19 AM
To: Jeffrey Walton
Cc: Security Basics List
Subject: Re: Linux Web Server Hardening (LAMP + Wiki)

Don't use Linux. It is insecure. Use Windows or one of the BSDs.
All are much more secure.

On Fri, Jan 25, 2013, at 04:31 PM, Jeffrey Walton wrote:
> Hi All,
> 
> Is anyone aware of a hardening guide for a Linux LAMP server with a 
> Wiki component?
> 
> I have an older Linux Server hardening book, but nothing recent. I 
> have not seen a Wiki hardening document.
> 
> Thanks in advance,
> 
> Jeff
> 
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this 
> guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company 
> and how your customers can tell if a site is secure. You will find out 
> how to test, purchase, install and use a thawte Digital Certificate on 
> your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your 
> encryption keys and digital certificates.
> 
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --
> 

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------