10/03/10

Ways to improve security

Don't compile/disable all unnec modules
  mod_status, mod_info,....

Listen

ServerRoot & DocumentRoot

HostnameLookups
   213.219.122.11
   zone-h.org

User & Group
  webserv
  Module: mod_suexec
  Directive:  SuExecUserGroup cgiuser cgiusergroup

ServerAdmin webmaster@cs.ucc.ie

ServerTokens Prod

ErrorDocument

Options
  Options +Indexes
  Options -Indexes
  Options +Includes
  Options -Includes
  Options +ExecCGI
  Options -ExecCGI

AllowsOverride None

<Directory />
  Deny from All
</Directory>

<Directory /users/2012/dtab/CS2510/htdocs/>
  <Limit GET>
    Allow from All
  </Limit>
</Directory>

<FilesMatch .*~>
  Deny from All
</FilesMatch>

<FilesMatch \..*>
  Deny from All
</FilesMatch>