What are the best practices for a Debian Squeeze + Grsecurity/PAX based system when multiple, and therefore insecure, websites must run on the same server? I mean how can I mitigate an attack, so that if UserX's website got hacked, the other hosted sites remain intact etc.? Are there any good guides on this topic?


I would start by reading http://wiki.apache.org/httpd/PrivilegeSeparation

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.