2008/2/11, James A. Peltier jpeltier@cs.sfu.ca:
This is a very broad question to ask, however, I will appeal to the basics.
- Use HTTPS whenever possible to avoid any passwords crossing the wire
in clear text.
- Ensure only the necessary modules are installed or enabled for your
CMS to operate.
Always think least permissions necessary to perform the task
Ensure that MySQL is locked down with least permissions necessary.
At the very least after you've installed MySQL make sure to run the secure-mysql-installation script to assign a password to the MySQL root user and lock down some of the basic tables.
Each system is different and you should follow the guidelines outlined by the CMS to properly secure. If you are not sure of what you are deploying, that's kinda scary, you should be weary of that and tread lightly.
thank you
I will deploy Wikka Wiki [0] - there are no explicit security settings or guidelines
How to harden Apache and PHP (without using SELinux)?
cheers Simon
[0] http://wikkawiki.org/HomePage