securing server help

shafey · 07-17-2006, 03:20 AM

Hi all
i am poor at linux security
so plz help me how could i secure my server
am runing Centos 4 ( mail server postfix - Apache server )

i have make these steps but i did not know if it right
1-make php at safe mode
2-lock root user and create a new user with root privilege

plz help

unSpawn · 07-17-2006, 04:59 AM

Maybe it's time to do some reading first. Head over to the LQ FAQ: Security references and check out post #1. Work your way down reading at least
UNIX Security Checklist v2.0: http://www.cert.org/tech_tips/unix_s...cklist2.0.html
SANS, The Twenty Most Critical Internet Security Vulnerabilities: http://www.sans.org/top20/
Securing & Optimizing Linux: The Ultimate Solution (PDF): http://www.tldp.org/LDP/solrhe/Secur...ution-v2.0.pdf
Security Quick-Start HOWTO for Linux,: http://tldp.org/HOWTO/Security-Quickstart-Redhat-HOWTO/
Intruder Detection Checklist (CERT): http://www.cert.org/tech_tips/intrud...checklist.html
Then check out post #6 "Securing networked services" for more info on Apache.