ExternalMirrors
/
apache-formula
kopia lustrzana https://github.com/saltstack-formulas/apache-formula.git
Obserwuj 1
Polub 0
Forkuj 1
Kod Zgłoszenia 0 Wydania 31 Wiki Aktywność
Saltstack Official Apache Formula
Nie możesz wybrać więcej, niż 25 tematów Tematy muszą się zaczynać od litery lub cyfry, mogą zawierać myślniki ('-') i mogą mieć do 35 znaków.
454 Commity
5 Gałęzie
Drzewo: ba2368907d
Gałęzie Tagi
${ item.name }
Utwórz gałąź ${ searchTerm }
z 'ba2368907d'
${ noResults }
apache-formula/apache/hardening.sls

68 lines
1.6KB
Czysty Wina Historia 

  1. {% from "apache/map.jinja" import apache with context %}

  2. 

  3. include:

  4.   - apache

  5. 

  6. nologin_shell_for_apache_user:

  7.   user.present:

  8.     - name: {{ apache.user }}

  9.     - shell: /sbin/nologin

  10.     - require:

  11.       - pkg: apache

  12.     - watch_in:

  13.       - module: apache-restart

  14.     - require_in:

  15.       - module: apache-restart

  16.       - module: apache-reload

  17.       - service: apache

  18. 

  19. remove_httpd_manual:

  20.   pkg.removed:

  21.     - name: httpd-manual

  22.     - require:

  23.       - pkg: apache

  24.     - watch_in:

  25.       - module: apache-restart

  26.     - require_in:

  27.       - module: apache-restart

  28.       - module: apache-reload

  29.       - service: apache

  30. 

  31. /etc/httpd/conf.d/autoindex.conf:

  32.   file.managed:

  33.     - contents: |

  34.         # File commented with Salt, Do NOT Edit

  35.         # Do NOT delete because it is contained in the rpm, so it wil re-created on the next upgrade

  36.         # It is emptied for hardening purpose

  37.     - require:

  38.       - pkg: apache

  39.     - watch_in:

  40.       - module: apache-restart

  41.     - require_in:

  42.       - module: apache-restart

  43.       - module: apache-reload

  44.       - service: apache

  45. 

  46. 

  47. /etc/httpd/cgi-bin/printenv:

  48.   file.absent:

  49.     - require:

  50.       - pkg: apache

  51.     - watch_in:

  52.       - module: apache-restart

  53.     - require_in:

  54.       - module: apache-restart

  55.       - module: apache-reload

  56.       - service: apache

  57. 

  58. /etc/httpd/cgi-bin/test-cgi:

  59.   file.absent:

  60.     - require:

  61.       - pkg: apache

  62.     - watch_in:

  63.       - module: apache-restart

  64.     - require_in:

  65.       - module: apache-restart

  66.       - module: apache-reload

  67.       - service: apache