[olug] Fwd: Linux Web Server Hardening (LAMP + Wiki)

[Jay Bendon]

Heres some resources i've found:

http://security.stackexchange.com/questions/993/hardening-linux-server
https://www.nsa.gov/ia/_files/factsheets/rhel5-pamphlet-i731.pdf
http://people.redhat.com/sgrubb/files/hardening-rhel5.pdf
https://www.owasp.org/index.php/Main_Page

As to the linux isn't secure statement, that person should feel free to
play in traffic and on railroad tracks, etc, for spreading that FUD.

--Jay


On Mon, Jan 28, 2013 at 7:52 PM, Jason Troy <jason.troy at gmail.com> wrote:

> I'm curious if there are any LAMP users on the list who want to share
> resources. One person responded to this post with "use win-doze, linux
> isn't secure!".
>
> --JT
> ---------- Forwarded message ----------
> From: "Jeffrey Walton" <noloader at gmail.com>
> Date: Jan 28, 2013 2:01 AM
> Subject: Linux Web Server Hardening (LAMP + Wiki)
> To: "Security Basics List" <security-basics at securityfocus.com>
>
> Hi All,
>
> Is anyone aware of a hardening guide for a Linux LAMP server with a
> Wiki component?
>
> I have an older Linux Server hardening book, but nothing recent. I
> have not seen a Wiki hardening document.
>
> Thanks in advance,
>
> Jeff
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and
> how your customers can tell if a site is secure. You will find out how to
> test, purchase, install and use a thawte Digital Certificate on your Apache
> web server. Throughout, best practices for set-up are highlighted to help
> you ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug
>