Adobe 38043740 Lockdown Guide - Page 29

Apache Configuration, To Lock Down

Get Adobe 38043740 - ColdFusion Standard - Mac PDF manuals and user guides
UPC - 883919135168
View all Adobe 38043740 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 29 highlights

Create a user for ColdFusion to run as, in this guide we use cfusion, but again feel free to choose a unique name: # adduser -g webservices -s /sbin/nologin -M -c ColdFusion cfusion Specify a strong password for the new user: # passwd cfusion 2.3.6 - Apache Configuration Create a directory for ColdFusion Administrator web site: # mkdir /web/cfadmin # mkdir /web/cfadmin/wwwroot Setup permission on web partition: # chgrp -R webservices /web # chown -R cfusion /web # chmod -R 750 /web Note the permission 750 grants rwxr-x--- permission, meaning owner (cfusion) has full control, while the group (webservices) only has read and execute permission (execute permission is needed to allow directory traversal by the user). Most applications will require some write permission under the web root, you can change owner to root (by running chgrp root /web/path) for files and directories that do not need write permission. In addition while directories will require execute permission, files in those directories will not require execute permission. To Lock Down /CFIDE add the following to your /etc/httpd/httpd.conf file: Order Deny,Allow 29

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
29
Create a user for ColdFusion to run as, in this guide we use
cfusion
, but again feel free to choose a unique
name:
# adduser -g webservices -s /sbin/nologin -M -c ColdFusion cfusion
Specify a strong password for the new user:
# passwd cfusion
2.3.6 - Apache Configuration
Create a directory for ColdFusion Administrator web site:
# mkdir /web/cfadmin
# mkdir /web/cfadmin/wwwroot
Setup permission on web partition:
# chgrp -R webservices /web
# chown -R cfusion /web
# chmod -R 750 /web
Note the permission 750 grants rwxr-x--- permission, meaning owner (cfusion) has full control, while the group
(webservices) only has read and execute permission (execute permission is needed to allow directory traversal
by the user).
Most applications will require some write permission under the web root, you can change owner to
root
(by
running
chgrp root /web/path
) for files and directories that do not need write permission. In addition
while directories will require execute permission, files in those directories will not require execute permission.
To Lock Down
/CFIDE
add the following to your
/etc/httpd/httpd.conf
file:
<Location /CFIDE>
Order Deny,Allow