오래전 이야기/Server

apache 서버의 기본적인 보안사항

리눅스 엔지니어였던 2008. 9. 15. 14:03
 아파치 정보출력제어

#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of:  Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.

#
ServerTokens Prod        ===> 이부분을 알맞게 수정 추천하는 방식은 Prod


 브라우징 제거


#<Directory "/usr/local/apache2/htdocs">

#
# Possible values for the Options directive are "None", "All",
# or any combination of:
#   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
#
# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.
#
# The Options directive is both complicated and important.  Please see
# http://httpd.apache.org/docs-2.0/mod/core.html#options
# for more information.
#
#    Options Indexes FollowSymLinks                     ===> 이부분을 수정하거나 아예 삭제

#
# AllowOverride controls what directives may be placed in .htaccess files.
# It can be "All", "None", or any combination of the keywords:
#   Options FileInfo AuthConfig Limit
#
    AllowOverride None

#
# Controls who can get stuff from this server.
#
    Order deny,allow
    Allow from all

</Directory>