5 ms·
Does anyone have any other guides like this? I'm using Arch Linux and want to run nginx on it. I'd like to make sure it's as secure as I can make it before depl
by gks 15y ago
Does anyone have any other guides like this? I'm using Arch Linux and want to run nginx on it. I'd like to make sure it's as secure as I can make it before deploying the website.
- khafra 15y agoThe NSA's STIGs are a useful resource. If you want the higher-level policies they come from, NIST[0] is one candidate. If you want documents around the same level of specificity as the STIGs, you'll probably need a non-governmental source. Arch Linux and Nginx are not EAL certified[1] at any level, so the US Government isn't even going to try to secure them. [0] http://csrc.nist.gov/publications/PubsITLSB.html http://csrc.nist.gov/publications/PubsITLSB.html [1] http://en.wikipedia.org/wiki/Common_Criteria http://en.wikipedia.org/wiki/Common_Criteria
- JshWright 15y agoPacman doesn't verify the integrity of packages before installing them. This is a pretty major security hole, in my opinion. If you're concerned about running a secure and stable production server, Arch should probably be your last choice. Don't get me wrong, I think Arch is a fine distro, I just think rolling releases are a scary idea for production servers.
- deleted 15y ago[deleted]