Re: [Slashcode-general] Securing a box running Slash

[Patrick G. <cap...@sl...>]

Dave Aiello wrote:
> 
> The April issue of LinuxJournal has an article called "Battening down the
> Hatches with Bastille".  Has any discussion taken place on what would be
> required to get Slash running on a Bastille-hardened server?
> 

Not to my knowledge. The only real issue would be that all the ports
that you run your db and webserver are open.
I have a mandrake box that I have locked down Big Time (TM) with
ipchains, trimmed down scant inetd.conf, and other security tweaks, and
it runs fine. Another security issue is to run mysql or whatever db  you
run as a non-privileged user.


> I have looked around Slashcode.com and done some Google searches to try to find
> this information without bothering the whole list.  Sorry if this is an old
> issue....
> 
> Dave Aiello
> CTDATA
> 
> _______________________________________________
> Slashcode-general mailing list
> Sla...@li...
> http://lists.sourceforge.net/lists/listinfo/slashcode-general