Timeline for What are some steps to take for securing a Linux server that aren't in this list of obvious ones?

7 events

when toggle format	what		by	license	comment
Dec 7, 2012 at 21:19	comment	added	orokusaki		Thanks Rook. That's good info to have. I did typo when I said `Memcached` and `Redis` would run as `www-data`, but the rest were `www-data` :( lesson learned the easy way though :)
Dec 7, 2012 at 21:18	vote	accept	orokusaki
Dec 7, 2012 at 20:36	comment	added	rook		@orokusaki Ok, you probably have never written an exploit. But the best exploits are using the services against each other. For instance using the database to write a .php file in the web root. AppArmor helps with this, but your using ngix and everyone is running as www-data so you absolutely no separation what so ever. You just threw a bunch of criminals with construction equipment in the same jail cell.
Dec 7, 2012 at 20:30	comment	added	orokusaki		Thanks - regarding your "total and complete disregard..." comment: Did you mean, because I've used `www-data` so gratuitously? Which programs should be running as `www-data`? My web application is really a combination of `uWSGI` and `Nginx`. Should both run as `www-data`?
Dec 7, 2012 at 20:16	history	edited	rook	CC BY-SA 3.0	edited body
Dec 7, 2012 at 20:01	history	edited	rook	CC BY-SA 3.0	added 220 characters in body
Dec 7, 2012 at 19:56	history	answered	rook	CC BY-SA 3.0