I consider myself to be reasonably good with IT, however I am relatively fresh at server and system administration. I am a web developer for my company and I have been charged with setting up and migrating to a new VPS to get away from the shared hosting my company has been on for ages.
In this process, I have spent almost a week now hardening the server (security became an issue, which is why we're moving in the first place) and have gone over and above to harden the server. I've installed and configured ConfigServer Firewall, hardened SSH, only private keys, all the good stuff. But I found a program called grsecurity that looks promising, but I guess I'm just curious as to whether or not it's overkill?
Are there things that grsecurity offers that I really need? Or is it something that I can do without? I read something about how it prevents buffer overflows and other things, however I am just curious as to whether this is worthwhile, as I don't want to add so many moving parts to the security of this server that I end up falling on my face.
I appreciate any feedback you can give me, or links to tutorials/information that you may have!
For what it's worth, the server environment is as follows:
- Linode VPS 2048
- CentOS 6.3
- PHP 5.4.5
- ConfigServer Firewall
Again, I appreciate whatever feedback you can offer me! I trust this community implicitly, and I know you guys know what you're talking about!