Freitag, 31. Oktober 2008

Versionsinfo abschalten apache & php

/etc/apache2/apache2.conf


# ScriptAlias /cgi-bin/ "/usr/local/apache2/cgi-bin/"
LogLevel notice


Options -FollowSymLinks -Includes -Indexes -MultiViews
#
#
#



/etc/apache2/sites-available/default
# ErrorLog
# CustomLog


/etc/apache2/conf.d/security


ServerTokens Prod
ServerSignature Off
TraceEnable Off



/usr/include/apache2/ap_release.h
#define AP_SERVER_BASEVENDOR "Restricted server"
#define AP_SERVER_BASEPRODUCT "Secure Web Server"




---------


httpd.conf

ServerTokens Prod
ServerSignature Off



php.ini


expose_php = Off
display_errors=Off
register_globals = Off


bei SuSE mit apache v2.xx und php5


/etc/php5/apache2/php.ini

expose_php = Off
display_errors=Off
register_globals = Off



/etc/sysconfig/apache2

APACHE_SERVERTOKENS="Prod"
APACHE_SERVERSIGNATURE="off"