On 28 July 2010 12:23, Matthew Hannigan <m...@zip.com.au> wrote: > On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote: > [ .... ] >> How about a DNS, squid and web server with multiple name based >> virtual domains on the same box? >> >> Is doing the above really dangerous on a fully patched and up to >> date system? >lso depends on the webapp. > I'd be more comfortable with java (especially with security > manager on) which is after all another form of vm. > > With php (wordpress, drupal, moodle, or home grown) definitely not > confortable.
While I also dislike php, what did the last pm's website use ? drupal. What the president of the united states use - drupal. I can keep on going :) Java is like php, there are also language flaws coming out to bite you real soon. /me mutters something about OH MY THEY ESCAPED FROM THE JVM. Also, if you really care about the security of the system - install grsecurity[1]. You shouldn't be taking any chances :P - you should install it either in the guests, guests and the host, or only on the 'host' (-if no vms in use). [1] http://www.grsecurity.net/ -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html