Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I work with sensible data, so I need a reasonable level of security and use Ubuntu as main operative system in a professional activity.

I have developed a php platform that performs some sensible operations with AES and RSA, so I need to have a local web server.

Does it break system security? Which fixes may I apply?

And, more in general, are Ubuntu default setting safe enough?

share|improve this question
I am using a router that blocks almost all the ports... Do i need to enable ufw? – Surfer on the fall Apr 2 '12 at 19:46
up vote 2 down vote accepted

If you are classifying your system as a high-value asset, I would say the defaults are not sufficient. I would recommend downloading and reading the CIS benchmarks for Debian and Apache and implementing the hardening recommendations. More specifically out of the box 'root' logins are permitted with SSH server which is truly stupid. Attached is a link to the site where you can download them.

share|improve this answer

If I understand correctly, you will have a apache server. If not please, don't read:

Far I know the default settings are NOT secure enough(but yes, is very secure for normal professional use). In google you probably found some tutorials about security for a apache web server.

share|improve this answer

We're looking for long answers that provide some explanation and context. Don't just give a one-line answer; explain why your answer is right, ideally with citations. Answers that don't include explanations may be removed.

OK, but the server is only local. No one except me can reach port 80... is anyway a security problem? – Surfer on the fall Apr 2 '12 at 19:43
So, I think the deffault setting will be enough secure... – Carlos Soriano Sánchez Apr 12 '12 at 21:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.