<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Discussion on 10 things you should do to secure Apache ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-322852]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/discussions/102-322852/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-18T19:17:31-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[Some Nice Tips, but...]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-322852-3215976]]></link>
        <description><![CDATA[Surely setting the immutable bit on httpd.conf is mere &quot;security by obscurity&quot;. If the server administrator follows the advice of your earlier steps, he won't be able to modify httpd.conf without root privileges anyway. But once an attacker gets root, he can reset the immutable bit.Also, a discussion of which of the recommended setting differ from installation default would be nice, it would improve the article a lot.On Ubuntu, for example, I don't need to follow the step talking about setting user and group, because the default already handles that: a special user/group is created just for running Apache, Apache runs as that, not as root.OTOH, what is a little weird is that httpd.conf (Debian insists on renaming this 'apache2.conf' in their packages) is owned by root. I haven't been able to figure out whether this is a good thing or not.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-322852-3215976]]></guid>
        <dc:creator><![CDATA[mejohnsn]]></dc:creator>
        <pubDate>Thu, 17 Dec 2009 18:19:41 -0800</pubDate>
    </item>
    </channel>
</rss>

