National vocational college skills competition network security competition -- detailed explanation of Apache security configuration

Apache Security configuration

Mission environment description ：

• Server scenario ：A-Server
• Server scenario operating system ： Linux
• Server user name ：root; password ：123456

1. Open the server scenario （A-Server）, Clear firewall rules from the command line . View the scene on the server apache edition , Submit the viewed service version string completely ;

Flag=Apache/2.2.23 (Unix)

 

1. Detect this version in the server scenario apache Whether there is Show banner Information vulnerabilities , If validation exists , Modify the configuration file to reinforce this vulnerability , And restart Apache service , String the content of this item ( No status ) As flag Submit ;

Flag=ServerSignature

 

 

1. Check whether the server scenario configuration can browse the system directory , If verification exists, this vulnerability will be in Apache In the configuration file , Find the system root directory /var/www Configuration properties of , Delete the permission of the original content of this attribute , And restart Apache service , Delete the string of this reinforcement item as flag Submit ;

Flag=Indexes

 

 

1. Reasonably configure the server scenario apache Operating account of , And in httpd.conf Find the running account in , Take the account name configured for this service as flag Submit ;

Flag=nobody

 

1. Configure the server scenario httpd.conf, Restrict forbidden folders , Verify that you can access /var/www/data Under the table of contents index.php, If this vulnerability exists, it needs to be reinforced , Take this reinforced complete string as flag Submit ;（ Tips ：（<Directory /var/www/data>）***</Directory>* The number is what needs to be added ）

Flag=Deny from all

 

1. Configure the server scenario httpd.conf, Limit the specific of some special directories ip visit , Such as internal interface, etc . Modify right data Configuration of directory , Restart apache service . Use the fixed part of the reinforcement item as flag Submit ;

Flag=allow from