[Koha-devel] Koha Security best practises

[Dobrica Pavlinusic]

On Sun, Jun 19, 2011 at 09:57:02PM +0530, Mahesh T Pai wrote:
> 
> Is a best practises document available for securing a System running
> Koha?
> 
> I mean beyond whatever documentation is available for OSes in general,
> is there anything Koha specific to look into? 
> 
> I cannot think of anything beyond filtering out incoming traffic to
> ports other than 80 and 8080, and long complicated passwords. 

We are using https for logged in users[1] and for intranet.

1: just edit login form action to https version

-- 
Dobrica Pavlinusic               2share!2flame            dpavlin at rot13.org
Unix addict. Internet consultant.             http://www.rot13.org/~dpavlin