Jak59 a écrit 2 commentaires

  • [^] # Re: /var/log/apache/error.log

    Posté par . En réponse au message apache virtualhost readhat grsec. Évalué à 1.

    Il n'y a rien dans mon error_log ...


    Sylvain
  • [^] # Re: ...

    Posté par . En réponse au message apache virtualhost readhat grsec. Évalué à 1.

    Voilà mon thhpd.conf (j'ai volontairement masqué les ip) :
    ServerType standalone
    ServerRoot "/usr/local/apache"
    #LockFile /usr/local/apache/logs/httpd.lock
    PidFile /usr/local/apache/logs/httpd.pid
    ScoreBoardFile /usr/local/apache/logs/httpd.scoreboard
    #ResourceConfig conf/srm.conf
    #AccessConfig conf/access.conf
    Timeout 300
    KeepAlive On
    MaxKeepAliveRequests 100
    KeepAliveTimeout 15
    MinSpareServers 10
    MaxSpareServers 20
    StartServers 15
    MaxClients 150
    MaxRequestsPerChild 60
    <IfDefine SSL>
    Listen 80
    Listen 443
    #BindAddress *
    ExtendedStatus On
    Port 80
    User nobody
    Group nobody
    ServerAdmin tech@ovh.net
    ServerName nsxxxxxx.ovh.net
    DocumentRoot "/usr/local/apache/htdocs"
     Options Includes ExecCGI MultiViews FollowSymLinks Indexes 
     AllowOverride All
    <Directory "/usr/local/apache/htdocs">
     Options Includes ExecCGI Indexes FollowSymLinks MultiViews
     AllowOverride All 
     Order allow,deny
     Allow from all
    <IfModule mod_userdir.c>
     UserDir www
    <IfModule mod_dir.c>
     DirectoryIndex index.html index.shtml index.htm index.cgi index.php index.php4 index.php3 index.wml index.asp
    AccessFileName .htaccess
    <Files ~ "^\.ht">
     Order allow,deny
     Deny from all
    UseCanonicalName On
    <IfModule mod_mime.c>
     TypesConfig /usr/local/apache/conf/mime.types
    DefaultType text/plain
    <IfModule mod_mime_magic.c>
     MIMEMagicFile /usr/local/apache/conf/magic
    HostnameLookups on
    ErrorLog /usr/local/apache/logs/error_log
    LogLevel warn
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    LogFormat "%{Referer}i -> %U" referer
    LogFormat "%{User-agent}i" agent
    CustomLog /usr/local/apache/logs/access_log common
    ServerSignature On
    <IfModule mod_alias.c>
     Alias /icons/ "/usr/local/apache/icons/"
     <Directory "/usr/local/apache/icons">
     Options Indexes MultiViews
     AllowOverride None
     Order allow,deny
     Allow from all
     
     ScriptAlias /cgi-bin/ "/usr/local/apache/cgi-bin/"
     <Directory "/usr/local/apache/cgi-bin">
     AllowOverride None
     Options None
     Order allow,deny
     Allow from all
     
    <IfModule mod_autoindex.c>
     IndexOptions FancyIndexing
     AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
     AddIconByType (TXT,/icons/text.gif) text/*
     AddIconByType (IMG,/icons/image2.gif) image/*
     AddIconByType (SND,/icons/sound2.gif) audio/*
     AddIconByType (VID,/icons/movie.gif) video/*
     AddIcon /icons/binary.gif .bin .exe
     AddIcon /icons/binhex.gif .hqx
     AddIcon /icons/tar.gif .tar
     AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
     AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
     AddIcon /icons/a.gif .ps .ai .eps
     AddIcon /icons/layout.gif .html .shtml .htm .pdf
     AddIcon /icons/text.gif .txt
     AddIcon /icons/c.gif .c
     AddIcon /icons/p.gif .pl .py
     AddIcon /icons/f.gif .for
     AddIcon /icons/dvi.gif .dvi
     AddIcon /icons/uuencoded.gif .uu
     AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
     AddIcon /icons/tex.gif .tex
     AddIcon /icons/bomb.gif core
     AddIcon /icons/back.gif ..
     AddIcon /icons/hand.right.gif README
     AddIcon /icons/folder.gif ^^DIRECTORY^^
     AddIcon /icons/blank.gif ^^BLANKICON^^
     DefaultIcon /icons/unknown.gif
     ReadmeName README
     HeaderName HEADER
     IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
    <IfModule mod_mime.c>
     AddEncoding x-compress Z
     AddEncoding x-gzip gz tgz
     AddLanguage da .dk
     AddLanguage nl .nl
     AddLanguage en .en
     AddLanguage et .ee
     AddLanguage fr .fr
     AddLanguage de .de
     AddLanguage el .el
     AddLanguage it .it
     AddLanguage ja .ja
     AddCharset ISO-2022-JP .jis
     AddLanguage pl .po
     AddCharset ISO-8859-2 .iso-pl
     AddLanguage pt .pt
     AddLanguage pt-br .pt-br
     AddLanguage ltz .lu
     AddLanguage ca .ca
     AddLanguage es .es
     AddLanguage sv .se
     AddLanguage cz .cz
     <IfModule mod_negotiation.c>
     LanguagePriority en da nl et fr de el it ja pl pt pt-br ltz ca es sv
     
     AddType application/x-httpd-php .php .php3
     AddType application/x-httpd-php-source .phps
     AddType application/x-tar .tgz
     AddHandler cgi-script .cgi
     AddType text/html .shtml
     AddHandler server-parsed .shtml
    #MetaDir .web
    #MetaSuffix .meta
    <IfModule mod_setenvif.c>
     BrowserMatch "Mozilla/2" nokeepalive
     BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
     BrowserMatch "RealPlayer 4\.0" force-response-1.0
     BrowserMatch "Java/1\.0" force-response-1.0
     BrowserMatch "JDK/1\.0" force-response-1.0
    <Location /ovh-status>
     SetHandler server-status
     Order deny,allow
     Deny from all
     Allow from proxy.ovh.net
    NameVirtualHost xxx.xxx.xxx.xx1
    <IfModule mod_gzip.c>
    mod_gzip_on yes
    mod_gzip_dechunk yes
    mod_gzip_keep_workfiles No
    mod_gzip_temp_dir /tmp
    mod_gzip_minimum_file_size 1002
    mod_gzip_maximum_file_size 10000000
    mod_gzip_maximum_inmem_size 1000000
    mod_gzip_min_http 1000
    mod_gzip_item_include file \.htm$
    mod_gzip_item_include file \.html$
    mod_gzip_item_include mime text/.*
    mod_gzip_item_include file \.php.*$
    mod_gzip_item_include mime "application/x-httpd-php.*"
    mod_gzip_item_include mime httpd/unix-directory
    mod_gzip_item_include handler ^server-status$
    mod_gzip_item_exclude file \.css$
    mod_gzip_item_exclude file \.js$
    mod_gzip_item_exclude reqheader "Via:.*1\.0 PROXY"
    mod_gzip_item_exclude reqheader "Via:.*1\.0 lavoisier \(NetCache NetApp\/5\.0\.1R2\)"
    <IfDefine SSL>
    AddType application/x-x509-ca-cert .crt
    AddType application/x-pkcs7-crl .crl
    <IfModule mod_ssl.c>
    SSLPassPhraseDialog builtin
    SSLSessionCache dbm:logs/ssl_scache
    SSLSessionCacheTimeout 300
    SSLMutex file:logs/ssl_mutex
    SSLRandomSeed startup builtin
    SSLRandomSeed connect builtin
    SSLLog logs/ssl_engine_log
    SSLLogLevel info
    <IfDefine SSL>
    <VirtualHost _default_:443>
    # General setup for the virtual host
    DocumentRoot "/home/ovh/www"
    ServerName nsxxxx.ovh.net 
    ServerAdmin xxxx@ovh.net
    ErrorLog logs/error_ssl_log
    TransferLog logs/access_ssl_log
    SSLEngine on
    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
    SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
    <Files ~ "\.(cgi|shtml|phtml|php3?)$">
     SSLOptions +StdEnvVars
    <Directory "/usr/local/apache/cgi-bin">
     SSLOptions +StdEnvVars
    SetEnvIf User-Agent ".*MSIE.*" \
     nokeepalive ssl-unclean-shutdown \
     downgrade-1.0 force-response-1.0
    CustomLog logs/ssl_request_log \
     "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
    </VirtualHost> 
    <VirtualHost xxx.xxx.xxx.xx1>
    ServerAdmin xxxx@ovh.net
    DocumentRoot /home/ovh/www
    User vpopmail
    Group vchkpw
    ServerName nsxxxxx.ovh.net
    CustomLog logs/ovh-access_log combined
    ScriptAlias /cgi-bin/ /home/ovh/cgi-bin/
    </VirtualHost>
    #Voilà le virtualhost en question
    <VirtualHost xxxx.xxxxxxxxxxxxxxx.com>
    ServerAdmin aaa@aaaaa.net
    DocumentRoot xxxx.xxxxxxxxxxxxxxx.com
    User databecker
    Group databecker
    ServerName xxxx.xxxxxxxxxxxxxxx.com
    CustomLog logs/databeckerfrance_log combined
    </VirtualHost>