ok, Added. Only problem Ive ran into using the suhosin extension is logging alerts on the ini_set memory limit on vbulletin sites. I added some directives to get it not to log that to syslog or sdterr. Ill have to double check the stderr log to make sure its not logging there anymore.
But Overall I found out using this setup plus suxec on litespeed is the most secure and no speed loss besides the extra resource usage I mentioned before in another post.
But all my new servers Im setting up as suexec, that way I can leave home and not have to worry about one site using up all the php processes. Plus since using litespeed with the php build in my tut I have had almost a complete drop is web apps on the server getting explioited. The allow_url_include off helps tons too. Probably more then anything else.
You cant make every user update their stuff. But with that php build it will even protect a lot of weak apps. I noticed I hardly ever find any shells or crap running in tmp no more, and that if someone gets hacked its usually proginating from their own computer being trojaned or something.
One question George. What I been doing on new servers is setting up and installing mod_security on apache then just letting litespeed load it, Is it even needed to compile and install it through apache or I can simply add <if module> then config?
