I may have a job putting a compramised system back into production (actually we are moving them from Ubuntu to a RHEL VM...)

I am still lacking some details but they are running apache, Mysql AND  Postgres, Drupal, and something called  Mason-CM.  I am not sure why the two DBs but if there is not a good reason I will move them off of one or the other.

Anyone have any good docs on securing Apache, Drupal, the DBs, or Mason-CM?

Thanks

Steve