Apache Security
Publisher: O'Reilly Media
Released: February 2005
Pages: 432
Description
Table of Contents
Product Details
About the Author
Recommended for You
Recently Viewed
Learning GNU Emacs
By Debra Cameron, Bill Rosenblatt
October 1991
Office 2008 for Macintosh: The Missing Manual
By Jim Elferdink
March 2008
Ebook: $27.99
Print & Ebook: $38.49
Print: $34.99
QuickBooks 2009: The Missing Manual
By Bonnie Biafore
October 2008
Ebook: $23.99
Print: $29.99
Customer Reviews

REVIEW SNAPSHOT®

by PowerReviews
O'Reilly Media Apache Security
 
4.0

(based on 1 review)

Ratings Distribution

  • 5 Stars

     

    (0)

  • 4 Stars

     

    (1)

  • 3 Stars

     

    (0)

  • 2 Stars

     

    (0)

  • 1 Stars

     

    (0)

REVIEWS

Reviewed by 1 customer

Displaying review 1

Back to top

(2 of 2 customers found this review helpful)

 
4.0

Good book, but needs a new revision

By Entropologist

from Des Moines, IA

About Me Security Consultant, Sys Admin

Verified Reviewer

Pros

  • Accurate
  • Easy to understand
  • Well-written

Cons

  • Not comprehensive enough

Best Uses

  • Intermediate

Comments about O'Reilly Media Apache Security:

Like most O'Reilly books, it's well thought out and fairly complete. Unsurprisingly, it focuses on the standard LAMP stack, giving advice on building and deploying Apache and hooking in PHP and SSL. Ruby seem to be missing, and Perl is just discussed within a chroot environment. It discusses performance tuning a bit, in the guise of protection against DOS, and then moves onto issues in a shared hosting environment.

Much of what is in this book is more general than just Apache, so it's best to consider this as a general security book for people running both Linux and Apache, and ideally using PHP and MySQL. It would be less useful to people running Apache on Windows and for people using less common languages. However, it is very good for the basics:

* Installing Apache
* Hardening Apache
* Setting up chroot
* Hardening PHP
* Configuring logging and access
* Understanding web attacks

Where it seems to lack a bit is:

* It presumes that the reader will install Apache from source, whereas most these days will install from a package. More advice on hardening Apache in the SuSE, Red Hat and Ubuntu/Debian environments would be useful.
* There is no mention of AppArmor or SELinux (which, to be fair, were pretty new when this book came out). A second edition will have to have these, as they are a key way to protect Apache against itself.
* A few pages on how to use Suhosin to protect PHP applications would be good.
* A section on protecting Ruby and one on Perl would be good. While it is certainly true that no book can cover everything, these three languages are the most common in the LAMP world and should probably be addressed, at least in passing.
* While we're at it, a section on hardening MySQL wouldn't be out place, as the book is more of a LAMP book than an Apache book anyway.

I recommend this book for the beginner to moderate admin, be they a web admin or in the security space. However, experienced people may not find much new in here. I would, however, love to see a second edition released.

Displaying review 1

Back to top

 
Buy 2 Get 1 Free Free Shipping Guarantee
Buying Options
Save a Tree - Go Digital  what is this?
Print: $34.95