RH 9.0 Security

tylor · 11-17-2004, 04:30 PM

Hello

I am using Red Hat 9.0 for Apache and FTP (proftpd) server and I am thinking about expanding to a perl server what security issues should I be worried about and how should I fix it?

thanks in advanced

Capt_Caveman · 11-17-2004, 09:20 PM

Could explain what you mean by a "perl server"? A shell server or something using perl for CGI?

tylor · 11-17-2004, 09:52 PM

yeah a shell server my bad

Capt_Caveman · 11-18-2004, 12:03 AM

Are you planning on setting up something like chroot jails for the shell users to live in? You'll also have to be much more concerned about local exploitation, so I would focus on doing kernel hardening and stack protection as well as locking down the file system. In regard to FTP, I'd recommend chrooting and avoiding anonymous writes or you'll be hosting warez in no time. Here's some good reading on Kernel Hardening:
http://www.sans.org/rr/whitepapers/linux/1294.php