Adobe 38043740 Lockdown Guide - Page 28

by default on Red Hat Enterprise Linux 5. Add, 3.5 Create users and groups for ColdFusion and Apache

Page 28 highlights

If Apache (httpd) was already installed, ensure that the latest version is installed: # yum update httpd Ensure that the latest version of openssl and mod_ssl is installed as well using similar yum commands as above. Remove any unneeded modules, for example: # yum erase php* Edit the /etc/httpd/conf/httpd.conf and remove or comment out (by placing a # at the beginning of the line) any LoadModule lines that load unnecessary modules. You can easily find a list of these module by running: # fgrep LoadModule /etc/httpd/conf/httpd.conf Some modules that you may be able to remove include: mod_imap, mod_info, mod_userdir, mod_status, mod_cgi, mod_autoindex See Appendix A.7 and A.8 for more information on securing the Apache Web Server. 2.3.5 Create users and groups for ColdFusion and Apache Create a new group to contain both Apache and ColdFusion, in this guide we use the name webservices feel free to choose a unique name. # groupadd webservices The Apache web server runs as user apache by default on Red Hat Enterprise Linux 5. Add apache to the webservices group: # usermod -a -G webservices apache 28

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87

28
If Apache (httpd) was already installed, ensure that the latest version is installed:
# yum update httpd
Ensure that the latest version of
openssl
and
mod_ssl
is installed as well using similar yum commands as
above.
Remove any unneeded modules, for example:
# yum erase php*
Edit the
/etc/httpd/conf/httpd.conf
and remove or comment out (by placing a
#
at the beginning of the
line) any
LoadModule
lines that load unnecessary modules. You can easily find a list of these module by
running:
# fgrep LoadModule /etc/httpd/conf/httpd.conf
Some modules that you may be able to remove include: mod_imap, mod_info, mod_userdir, mod_status,
mod_cgi, mod_autoindex
See Appendix A.7 and A.8 for more information on securing the Apache Web Server.
2.3.5 Create users and groups for ColdFusion and Apache
Create a new group to contain both Apache and ColdFusion, in this guide we use the name
webservices
feel free to choose a unique name.
# groupadd webservices
The Apache web server runs as user
apache
by default on Red Hat Enterprise Linux 5. Add
apache
to the
webservices
group:
# usermod -a -G webservices apache