Adobe 38043740 Lockdown Guide - Page 49

Red Hat Enterprise Linux Post Installation, 4.2.1 Install ColdFusion Hotfixes / Updates

Page 49 highlights

without these settings enabled so you may encounter something unexpected. Second when a ColdFusion update is released for the connector or if you want to add/update/delete an IIS connector you must re-enable these role services before updating the connector. 4.2 Red Hat Enterprise Linux Post Installation 4.2.1 Install ColdFusion Hotfixes / Updates Because Apache is not fully configured yet you will need to login to the ColdFusion administrator via the built-in web server, eg http://localhost:8500/ Click on Server Updates > Updates and then select the latest hotfix, and click Download. Verify the integrity of the download by performing an md5sum on the hotfix_XXX.jar file, see that it matches the value found in Adobe ColdFusion update feed: https://www.adobe.com/go/coldfusion-updates If the md5 checksum matches install the hotfix: /opt/coldfusion10/jre/bin/java -jar /opt/coldfusion10/cfusion/hfupdates/hotfix_XXX.jar Replace hotfix_XXX.jar with the filename of the hotfix jar you are installing, and follow the prompts. The installer will typically attempt to restart ColdFusion when done, you can however disable that, see documentation for details. 4.2.2 Specify permissions on web sites: # chown -R cfusion:webservices /web # chmod -R 750 /web SELinux requires permissions to allow apache to read the web root, we will copy the permissions from /var/www (the default apache web root on RHEL 6, using the --reference flag) and apply it to /web (our web site partition). 49

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87

49
without these settings enabled so you may encounter something unexpected. Second when a ColdFusion
update is released for the connector or if you want to add/update/delete an IIS connector you must re-enable
these role services before updating the connector.
4.2 Red Hat Enterprise Linux Post Installation
4.2.1 Install ColdFusion Hotfixes / Updates
Because Apache is not fully configured yet you will need to login to the ColdFusion administrator via the built-in
web server, eg
http://localhost:8500
/
Click on
Server Updates > Updates
and then select the latest hotfix, and click
Download
.
Verify the integrity of the download by performing an
md5sum
on the hotfix_XXX.jar file, see that it matches the
value found in Adobe ColdFusion update feed:
If the md5 checksum matches install the hotfix:
/opt/coldfusion10/jre/bin/java -jar /opt/coldfusion10/cfusion/hf-
updates/hotfix_XXX.jar
Replace hotfix_XXX.jar with the filename of the hotfix jar you are installing, and follow the prompts. The
installer will typically attempt to restart ColdFusion when done, you can however disable that, see
documentation for details.
4.2.2 Specify permissions on web sites:
# chown -R cfusion:webservices /web
# chmod -R 750 /web
SELinux requires permissions to allow apache to read the web root, we will copy the permissions from
/var/www
(the default apache web root on RHEL 6, using the
--reference
flag) and apply it to
/web
(our
web site partition).