Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I work with sensible data, so I need a reasonable level of security and use Ubuntu as main operative system in a professional activity.

I have developed a php platform that performs some sensible operations with AES and RSA, so I need to have a local web server.

Does it break system security? Which fixes may I apply?

And, more in general, are Ubuntu default setting safe enough?

share|improve this question
    
I am using a router that blocks almost all the ports... Do i need to enable ufw? –  Surfer on the fall Apr 2 '12 at 19:46
add comment

2 Answers

If you are classifying your system as a high-value asset, I would say the defaults are not sufficient. I would recommend downloading and reading the CIS benchmarks for Debian and Apache and implementing the hardening recommendations. More specifically out of the box 'root' logins are permitted with SSH server which is truly stupid. Attached is a link to the site where you can download them.

http://benchmarks.cisecurity.org/en-us/?route=downloads.benchmarks

share|improve this answer
add comment

If I understand correctly, you will have a apache server. If not please, don't read:

Far I know the default settings are NOT secure enough(but yes, is very secure for normal professional use). In google you probably found some tutorials about security for a apache web server.

share|improve this answer
    
OK, but the server is only local. No one except me can reach port 80... is anyway a security problem? –  Surfer on the fall Apr 2 '12 at 19:43
    
So, I think the deffault setting will be enough secure... –  Carlos Soriano Sánchez Apr 12 '12 at 21:18
add comment

We're looking for long answers that provide some explanation and context. Don't just give a one-line answer; explain why your answer is right, ideally with citations. Answers that don't include explanations may be removed.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.