What are the best practices for a Debian Squeeze + Grsecurity/PAX based system when multiple, and therefore insecure, websites must run on the same server? I mean how can I mitigate an attack, so that if UserX's website got hacked, the other hosted sites remain intact etc.? Are there any good guides on this topic?
Tell me more
×
Unix & Linux Stack Exchange is a question and answer site for
users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.
|
|
I would start by reading http://wiki.apache.org/httpd/PrivilegeSeparation |
|||
|
|
