1

What are the best practices for a Debian Squeeze + Grsecurity/PAX based system when multiple, and therefore insecure, websites must run on the same server? I mean how can I mitigate an attack, so that if UserX's website got hacked, the other hosted sites remain intact etc.? Are there any good guides on this topic?

1

1 Answer 1

1

I would start by reading http://wiki.apache.org/httpd/PrivilegeSeparation

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .