From 5c4fba3ffbe778bdffe10a93d04821579601a020 Mon Sep 17 00:00:00 2001 From: Arno Töll Date: Sat, 20 Oct 2012 02:58:14 +0200 Subject: Imported Upstream version 2.4.3 --- docs/manual/misc/security_tips.html.en | 97 ++++++++++++++++++++++------------ 1 file changed, 62 insertions(+), 35 deletions(-) (limited to 'docs/manual/misc/security_tips.html.en') diff --git a/docs/manual/misc/security_tips.html.en b/docs/manual/misc/security_tips.html.en index 833d1f02..35a23ab0 100644 --- a/docs/manual/misc/security_tips.html.en +++ b/docs/manual/misc/security_tips.html.en @@ -8,10 +8,13 @@ Security Tips - Apache HTTP Server - + + +
-

Modules | Directives | FAQ | Glossary | Sitemap

+

Modules | Directives | FAQ | Glossary | Sitemap

Apache HTTP Server Version 2.4

<-
@@ -40,7 +43,7 @@
  • Protect Server Files by Default
  • Watching Your Logs
  • Merging of configuration sections
    • - +
    top

    Keep up to Date

    @@ -331,11 +334,12 @@

    In the server configuration file, put

    -

    - <Directory />
    - AllowOverride None
    - </Directory> -

    + 
    +<Directory />
+    AllowOverride None
+</Directory>
+
    +

    This prevents the use of .htaccess files in all directories apart from those specifically enabled.

    @@ -362,27 +366,29 @@ work around this, add the following block to your server's configuration:

    -

    - <Directory />
    - Order Deny,Allow
    - Deny from all
    - </Directory> -

    + 
    +<Directory />
+    Order Deny,Allow
+    Deny from all
+</Directory>
+
    +

    This will forbid default access to filesystem locations. Add appropriate Directory blocks to allow access only in those areas you wish. For example,

    -

    - <Directory /usr/users/*/public_html>
    - Order Deny,Allow
    - Allow from all
    - </Directory>
    - <Directory /usr/local/httpd>
    - Order Deny,Allow
    - Allow from all
    - </Directory> -

    + 
    +<Directory /usr/users/*/public_html>
+    Order Deny,Allow
+    Allow from all
+</Directory>
+<Directory /usr/local/httpd>
+    Order Deny,Allow
+    Allow from all
+</Directory>
+
    +

    Pay particular attention to the interactions of Location and Directory directives; for instance, even if <Directory /> denies access, a @@ -394,9 +400,8 @@ recommend that you include the following line in your server configuration files:

    -

    - UserDir disabled root -

    + 
    UserDir disabled root
    +
    top
    @@ -439,12 +444,13 @@ you probably commented out the following in your server configuration file:

    -

    - <Files ".ht*">
    - Order allow,deny
    - Deny from all
    - </Files> -

    + 
    +<Files ".ht*">
+    Order allow,deny
+    Deny from all
+</Files>
+
    +
    top
    @@ -467,7 +473,28 @@  fr  |  ko  |  tr 

    -
    top

    Comments

    Notice:
    This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our mailing lists.
    +
    +

    Modules | Directives | FAQ | Glossary | Sitemap

    \ No newline at end of file -- cgit v1.2.3