Apache2在Debian上的安全设置包括多个方面,以下是一些关键的安全配置步骤和最佳实践:
sudo vim /etc/ssh/sshd_config
PermitRootLogin no
PasswordAuthentication no
sudo vim /etc/apache2/conf.d/security
ServerSignature off
ServerTokens Prod
/etc/apache2/sites-available/default
文件,使用“-”注释掉 Index
, FollowSymLinks
, MultiViews
。sudo a2enmod ssl
sudo cp /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-available/001-ssl.conf
sudo nano /etc/apache2/sites-available/001-ssl.conf
# 设置ServerName和DocumentRoot
SSLEngine on
SSLCertificateFile /path/to/certificate.crt
SSLCertificateKeyFile /path/to/private.key
ufw
允许HTTP和HTTPS服务的端口:sudo ufw allow http
sudo ufw allow https
/etc/php5/apache2/php.ini
文件,设置 safe_mode on
。disable_error=off
log_error=on
error_log=/var/log/php_errors.log
disable_function=eval,exec,system,passthru,shell_exec,open_basedir,mail_function,exec,link,unlink,rename,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,