[svlug] Configuring Server - SSH Trouble + Security Considerations

Lord Sauron lordsauronthegreat at gmail.com
Mon Oct 23 15:15:20 PDT 2006


On 10/23/06, Joe Buck <Joe.Buck at synopsys.com> wrote:
> On Mon, Oct 23, 2006 at 01:34:27PM -0700, Lord Sauron wrote:
> > Apache (beta portions of sites protected by username/password)
> > MySQL (listening to localhost ONLY)
> > PHP
>
> Ouch.  That is your biggest security risk, as it is very easy to mess
> up and basically give the net permission to execute anything as user
> "nobody" on your box.

What should I do instead?  CGI?  Java Tomcat?

-- 
========== GCv3.12 ==========
GCS d-(++) s+: a? C++ UL+>++++ P+
L++ E--- W+(+++) N++ o? K? w--- O? M+
V? PS- PE+ Y-(--) PGP- t+++ 5? X R tv-- b+
                DI+++ D+ G e* h- !r !y
========= END GCv3.12 ========




More information about the svlug mailing list