From 7714ca952620d0594eb32ff1bc0161333e2853d9 Mon Sep 17 00:00:00 2001 From: ywarnier Date: Sun, 24 Apr 2011 11:37:28 -0500 Subject: [PATCH] Added security recommendations page --- documentation/security.html | 60 +++++++++++++++++++++++++++++++++++++ 1 file changed, 60 insertions(+) create mode 100644 documentation/security.html diff --git a/documentation/security.html b/documentation/security.html new file mode 100644 index 0000000000..fda2b25d24 --- /dev/null +++ b/documentation/security.html @@ -0,0 +1,60 @@ + + + + + Chamilo 1.8.8 Optimization Guide + + + + + +
+

Chamilo 1.8.8 : Security Guide

+
+ +Documentation > Security Guide +
+
+

+ +

We recommend you don't take security issues too lightly. Chamilo is security-audited at least once a year, but you're never too sure. This list is a work in progress. Feel free to recommend additional measures by sending us an e-mail at info@chamilo.org.

+ + +

Contents

+ +
    + +
  1. Disclosing server info
    2. +
  2. Keeping up to date
    3. +
+ +

Disclosing server info

+

+It is considered a safer behaviour not to disclose server information from your Chamilo page. In order to avoid both web server and PHP information disclosure, you might want to take the following actions: +

    +
  • Locate the ServerTokens setting inside your Apache configuration and set it to "Prod"
    • +
  • Locate the ServerSignature setting inside your Apache configuration and set it to "Off"
    • +
  • Locate the expose_php setting inside your PHP configuration and set it to "Off"
    • +
  • Reload Apache
    • +
+

+ +

4. Keeping up to date

+

+Make sure you check our security issues page from time to time. +Subscribe to our free security alerts mailing-list: http://lists.chamilo.org/listinfo/security or that you follow our security Twitter feed: http://twitter.com/chamilosecurity. +

+ +
+

Authors

+ +