3

I work with sensible data, so I need a reasonable level of security and use Ubuntu as main operative system in a professional activity.

I have developed a php platform that performs some sensible operations with AES and RSA, so I need to have a local web server.

Does it break system security? Which fixes may I apply?

And, more in general, are Ubuntu default setting safe enough?

1
  • I am using a router that blocks almost all the ports... Do i need to enable ufw? Apr 2, 2012 at 19:46

2 Answers 2

3

If you are classifying your system as a high-value asset, I would say the defaults are not sufficient. I would recommend downloading and reading the CIS benchmarks for Debian and Apache and implementing the hardening recommendations. More specifically out of the box 'root' logins are permitted with SSH server which is truly stupid. Attached is a link to the site where you can download them.

http://benchmarks.cisecurity.org/en-us/?route=downloads.benchmarks

-2

If I understand correctly, you will have a apache server. If not please, don't read:

Far I know the default settings are NOT secure enough(but yes, is very secure for normal professional use). In google you probably found some tutorials about security for a apache web server.

2
  • OK, but the server is only local. No one except me can reach port 80... is anyway a security problem? Apr 2, 2012 at 19:43
  • So, I think the deffault setting will be enough secure... Apr 12, 2012 at 21:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .