Hardening Apache by Tony Mobily phần 9 potx

... 150 Apache in jail Apache, 1 89 191 chroot, 1 79 183 debugging, 191 – 193 installing, 1 89 libraries in, 188–1 89 name resolution files for, 186–187 preparing, 183–1 89 security issues related to, 199 –200 starting ... time, 193 testing with Nikto, 14– 19 web site for, 2, 6, 56, 1 69 and XSS (cross-site scripting), 92 94 Apache 2.x installing, 12–13 installing mod_ssl for, 34–35...

Ngày tải lên: 08/08/2014, 18:22

... deprecated). This Apache& apos;s directory will be /usr/local /apache1 . [root@merc apache_ source]# tar xvzf apache_ 1.3. 29. tar.gz apache_ 1.3. 29/ apache_ 1.3. 29/ cgi-bin/ apache_ 1.3. 29/ cgi-bin/printenv apache_ 1.3. 29/ cgi-bin/test-cgi [ ... apache_ 1.3. 29. tar.gz apache_ 1.3. 29/ apache_ 1.3. 29/ cgi-bin/ apache_ 1.3. 29/ cgi-bin/printenv apache_ 1.3. 29/ cgi-bin/test-...

Ngày tải lên: 08/08/2014, 18:22

... system): [root@merc apache_ source]# tar xvzf apache_ 1.3. 29. tar.gz apache_ 1.3. 29/ apache_ 1.3. 29/ cgi-bin/ apache_ 1.3. 29/ cgi-bin/printenv [ ] apache_ 1.3. 29/ src/support/suexec.c apache_ 1.3. 29/ src/support/suexec.h apache_ 1.3. 29/ src/Configuration [root@merc ... can be set. A + Apache location: /apache_ 1.3. 29 (Version 1.3. 29) [ ] [root@merc mod_ssl-2.8.14-1.3. 2...

Ngày tải lên: 08/08/2014, 18:22

... ones used by Apache in its error log. The syslog facility ID used by Apache by default is local7. Therefore, you need to add a line in the syslog.conf file like this: local7.* /var/log /apache_ error_log You ... contains: Restart your Apache daemon: [root@localhost root]# /usr/local /apache2 /bin/apachectl restart If everything went well, you should see Apache& apos;s log message...

Ngày tải lên: 08/08/2014, 18:22

... restart your Apache server: [root@merc root]# /usr/local /apache1 /bin/apachectl stop /usr/local /apache1 /bin/apachectl stop: httpd stopped [root@merc root]# /usr/local /apache1 /bin/apachectl start /usr/local /apache1 /bin/apachectl ... /usr/local /apache2 /conf/httpd.conf] [root@merc apache2 ]# The installation process will be the same if you use Apache 1.3.x (of course, you will need...

Ngày tải lên: 08/08/2014, 18:22

... apache_ 1.3.27.tar.gz apache_ 1.3.27/ apache_ 1.3.27/cgi-bin/ apache_ 1.3.27/cgi-bin/printenv apache_ 1.3.27/cgi-bin/test-cgi apache_ 1.3.27/ABOUT _APACHE [ ] apache_ 1.3.27/src/support/split-logfile apache_ 1.3.27/src/support/suexec.8 apache_ 1.3.27/src/support/suexec.c apache_ 1.3.27/src/support/suexec.h apache_ 1.3.27/src/Configuration ... -ld /tmp/apachebw/ drwxr-xr-x 4 nobod...

Ngày tải lên: 08/08/2014, 18:22

... restart Apache: [root@merc root]# /usr/local /apache1 /bin/apachectl stop /usr/local /apache1 /bin/apachectl stop: httpd stopped [root@merc root]# /usr/local /apache1 /bin/apachectl start /usr/local /apache1 /bin/apachectl ... is [root@merc members]# /usr/local /apache1 /bin/apachectl stop /usr/local /apache1 /bin/apachectl stop: httpd stopped [root@merc members]# /usr/local /apache1 /bin/a...

Ngày tải lên: 08/08/2014, 18:22

... -f $DD /apache_ alive_locked else #echo DEBUG: not enough seconds have passed, exiting exit fi /jail/usr/local /apache2 /bin/apachectl start [ ] execve("/jail/usr/local /apache2 /bin/apachectl", ["/jail/usr/local /apache2 /bin/apac" ... passed from January 1, 197 0 to the time when the warning was issued. For example: [root@merc apache_ scripts]# cat /var /apache_ sc...

Ngày tải lên: 08/08/2014, 18:22

... "^[0 -9] \{1,3\}\.[0 -9] \{1,3\}\.[0 -9] \{1,3\}\.[0 -9] \{1,3\}$"' if [ foo$good = foo ];then echo Incorrect IP format. The IP should be n.n.n.n, echo where n is a number. E.g. 151 .99 .444.55 ... added to $CONF # Stopping and restarting Apache # echo Stopping Apache $APACHECTL stop echo Starting Apache $APACHECTL start exit This script can be used by anyone wit...

Ngày tải lên: 08/08/2014, 18:22

... with, 121–122 XSS (cross-site scripting) attacks and Apache, 92 94 examples of, 85 92 , 94 95 explanation of, 85 online resources on, 96 preventing, 95 rule chaining and skipping in, 120 SecFilter ... Apache servers, overview of, 19 27 SecuriTeam, web address for, 238 security of Apache in jail, 199 –200 of log files, 58–61 necessity of, 99 –100 security modules. See also Apa...

Ngày tải lên: 08/08/2014, 18:22