How to secure the VPS before install VirtualMin

  • w7u64xi7
  • 01/17/12
  • Offline
Posted: Fri, 2012-03-16 06:51

Hello How to really well secure the VPS before I go for installing the VirtualMin? I am on CentOS 6 32x.


Howdy, Your Linux setup

  • andreychek
  • 01/05/09
  • Offline
  • Fri, 2012-03-16 09:38

Howdy,

Your Linux setup should be secure by default.

There's some details on that here:

http://www.virtualmin.com/documentation/security/faq


Thanks a lot, and I will

  • w7u64xi7
  • 01/17/12
  • Offline
  • Fri, 2012-03-16 11:01

Thanks a lot, and I will check them in details.


Since you will use a PHP

  • ronald
  • 12/20/07
  • Offline
  • Fri, 2012-03-16 14:20

Since you will use a PHP based website like Drupal, you may be interested in http://phpsec.org/
This is to secure your box when using php based scripts.
You can download and install on your box and then run the script. It will show you the weaknesses so you can repair them.


Is it to be installed before

  • w7u64xi7
  • 01/17/12
  • Offline
  • Fri, 2012-03-16 14:43

Is it to be installed before or after Drupal?


It would appear this phpsec

  • Locutus
  • 10/10/10
  • Offline
  • Fri, 2012-03-16 21:06

It would appear this phpsec website has not been updates in 5 years?


Ah, i was referring to this

  • ronald
  • 12/20/07
  • Offline
  • Sat, 2012-03-17 03:12

Ah, i was referring to this tool http://phpsec.org/projects/phpsecinfo/
It can give insights to improvements on the server.
I would upload the script after creating a domain on the box and run it in its environment.

to see a live example http://izihost.eu/phpsec/


Looks quite nice, but also

  • Locutus
  • 10/10/10
  • Offline
  • Sat, 2012-03-17 05:07

Looks quite nice, but also this script has not been updated in 5 years... You sure it still covers current-day security needs? :)

If there is any more-up-to-date alternative for this, please let me know! I'm quite interested in that.


I have found a newer version

  • ronald
  • 12/20/07
  • Offline
  • Sat, 2012-03-17 05:29

I have found a newer version here (0.3) it was updated last month
http://phpsec.xqus.com/download


Aah, very nice, thanks!

  • Locutus
  • 10/10/10
  • Offline
  • Sat, 2012-03-17 11:17

Aah, very nice, thanks!


How to install it?

  • w7u64xi7
  • 01/17/12
  • Offline
  • Sat, 2012-03-17 11:44

How to install it?


Haven't tested it yet.

  • Locutus
  • 10/10/10
  • Offline
  • Sat, 2012-03-17 12:00

Haven't tested it yet.


Please if any one knows to

  • w7u64xi7
  • 01/17/12
  • Offline
  • Sat, 2012-03-17 12:01

Please if any one knows to tell :)


Here is the

  • ronald
  • 12/20/07
  • Offline
  • Sun, 2012-03-18 06:21

Here is the manual
http://phpseclib.com/manual