-4
votes
2answers
80 views

Should I touch nothing when I run production service server? [closed]

I am going to run my first public game service server later. And many people advise not to touch anything if it's running well. I agree with them. But one thing I am curious is, the security updates. ...
1
vote
1answer
318 views

Security risks of PermitUserEnvironment in ssh

I've read quite a few posts regarding the use of PermitUserEnvironment and the file ~/.ssh/environment in order to pass env variables to an ssh shell. The official sshd docs and a few other resources ...
18
votes
2answers
664 views

Best Practices for updating a previously unmaintained server RHEL5.7

A new RedHat EL5.6 server has been recently put under my care. It is immediately obvious that, for the previous 12 months, little to no attention has been given to any sort of package updates. ...
0
votes
1answer
438 views

Bastille not working on CentOS 5.5 - need fixes or alternatives

After looking into how to prepare my LAMP server for production use, one of the things I saw that was suggested was to use Bastille Hardening. It seems that v3.2.1 is not functioning properly and is ...
2
votes
2answers
273 views

Should production servers be allowed acess to database servers?

Our company currently has a customer facing cluster for our signups and customer account management which have direct access to the live database (one master plus several read only slaves). We have ...
6
votes
4answers
313 views

Paranoid Sysadmin -vs- Out-of-Date PHP version

How can a paranoid sysadmin confidently stay up-to-date with the latest stable PHP versions? (security fixes have been coming in pretty regularly). This is a Production server, and so "breaking ...