Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

If I have a vps hosting with linux, what should I do to be sure it has platform security ?

I install a server (let's say tomcat), a database server (mysql) and then I deploy my application. Should I be concerned about some security issues ? I am talking about the platform security, not my software application

Thank you

share|improve this question

migrated from stackoverflow.com Nov 30 '10 at 1:10

This question came from our site for professional and enthusiast programmers.

3 Answers 3

up vote 1 down vote accepted

You should apply the same security policy as for a physical server. Configure tomcat and mysql to listen on 127.0.0.1 only or use a firewall to allow only certain IPs to access these services directly. Keep the server and all services updated. Disable ssh password based authentication and use only key based authentication. Disable remote authentication for root user. Save the logs on a different machine. If possible use an IDS in front of your web server.

share|improve this answer
    
"Configure tomcat and mysql to listen on 127.0.0.1 only or use a firewall to allow only certain IPs to access these services directly." But I want to deploy a public website, I don't want to restrict users. –  Horatiu Jeflea Nov 30 '10 at 11:16
    
Yes, because you will want to expose only the web server. The application server and the database should be accessible only trough web server –  Mircea Vutcovici Dec 1 '10 at 6:09

At the least, you'll want to secure SSH and lock down all other services/ports that you don't need, and keep your system up to date.

slicehost has a nice intro to basic setup for various distros: http://articles.slicehost.com/2008/1/30/centos-setup-page-1

share|improve this answer

with htaccess? remember to set noindex for your site.

for any web exposed ssh server use certificates.

Those are some of the basic things.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.