Security

Where to find known security issues

apache

• http://httpd.apache.org/security_report.html
  • http://www.apacheweek.com/features/security-13
  • http://www.apacheweek.com/features/security-20

Security mailing lists to follow

• Bugtraq (general security mailing list, high volume, includes advisories and announcements for many vendors)
• US-CERT alerts mailing list
• Fedora-announce list (includes security updates)

live code

You are responsible for checking the changes to code which you make on the live site, including code from other people which has been committed to SVN.

Eliminating use of passwords for logins/sudo/su

Should password logins be disabled altogether? They aren't strictly necessary at any time except during OS installation.