Jak59 a écrit 2 commentaires

[^] # Re: /var/log/apache/error.log

Posté par Jak59 le 20 septembre 2004 à 09:52. En réponse au message apache virtualhost readhat grsec. Évalué à 1.

Il n'y a rien dans mon error_log ...

Sylvain
[^] # Re: ...

Posté par Jak59 le 20 septembre 2004 à 09:50. En réponse au message apache virtualhost readhat grsec. Évalué à 1.
Voilà mon thhpd.conf (j'ai volontairement masqué les ip) :
ServerType standalone

ServerRoot "/usr/local/apache"

#LockFile /usr/local/apache/logs/httpd.lock

PidFile /usr/local/apache/logs/httpd.pid

ScoreBoardFile /usr/local/apache/logs/httpd.scoreboard

#ResourceConfig conf/srm.conf
#AccessConfig conf/access.conf

Timeout 300

KeepAlive On

MaxKeepAliveRequests 100

KeepAliveTimeout 15

MinSpareServers 10
MaxSpareServers 20

StartServers 15

MaxClients 150

MaxRequestsPerChild 60

<IfDefine SSL>
Listen 80
Listen 443


#BindAddress *

ExtendedStatus On

Port 80

User nobody
Group nobody

ServerAdmin tech@ovh.net

ServerName nsxxxxxx.ovh.net

DocumentRoot "/usr/local/apache/htdocs"


    Options Includes ExecCGI  MultiViews   FollowSymLinks Indexes 
    AllowOverride All


<Directory "/usr/local/apache/htdocs">
    Options Includes ExecCGI Indexes FollowSymLinks MultiViews

    AllowOverride All 

    Order allow,deny
    Allow from all


<IfModule mod_userdir.c>
    UserDir www


<IfModule mod_dir.c>
    DirectoryIndex index.html index.shtml index.htm index.cgi index.php index.php4 index.php3 index.wml index.asp


AccessFileName .htaccess

<Files ~ "^\.ht">
    Order allow,deny
    Deny from all


UseCanonicalName On

<IfModule mod_mime.c>
    TypesConfig /usr/local/apache/conf/mime.types


DefaultType text/plain

<IfModule mod_mime_magic.c>
    MIMEMagicFile /usr/local/apache/conf/magic


HostnameLookups  on

ErrorLog /usr/local/apache/logs/error_log

LogLevel warn

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

CustomLog /usr/local/apache/logs/access_log common

ServerSignature On

<IfModule mod_alias.c>

    Alias /icons/ "/usr/local/apache/icons/"

    <Directory "/usr/local/apache/icons">
        Options Indexes MultiViews
        AllowOverride None
        Order allow,deny
        Allow from all
    

    ScriptAlias /cgi-bin/ "/usr/local/apache/cgi-bin/"

    <Directory "/usr/local/apache/cgi-bin">
        AllowOverride None
        Options None
        Order allow,deny
        Allow from all
    



<IfModule mod_autoindex.c>

    IndexOptions FancyIndexing

    AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip

    AddIconByType (TXT,/icons/text.gif) text/*
    AddIconByType (IMG,/icons/image2.gif) image/*
    AddIconByType (SND,/icons/sound2.gif) audio/*
    AddIconByType (VID,/icons/movie.gif) video/*

    AddIcon /icons/binary.gif .bin .exe
    AddIcon /icons/binhex.gif .hqx
    AddIcon /icons/tar.gif .tar
    AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
    AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
    AddIcon /icons/a.gif .ps .ai .eps
    AddIcon /icons/layout.gif .html .shtml .htm .pdf
    AddIcon /icons/text.gif .txt
    AddIcon /icons/c.gif .c
    AddIcon /icons/p.gif .pl .py
    AddIcon /icons/f.gif .for
    AddIcon /icons/dvi.gif .dvi
    AddIcon /icons/uuencoded.gif .uu
    AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
    AddIcon /icons/tex.gif .tex
    AddIcon /icons/bomb.gif core

    AddIcon /icons/back.gif ..
    AddIcon /icons/hand.right.gif README
    AddIcon /icons/folder.gif ^^DIRECTORY^^
    AddIcon /icons/blank.gif ^^BLANKICON^^

    DefaultIcon /icons/unknown.gif

    ReadmeName README
    HeaderName HEADER

    IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t



<IfModule mod_mime.c>

    AddEncoding x-compress Z
    AddEncoding x-gzip gz tgz

    AddLanguage da .dk
    AddLanguage nl .nl
    AddLanguage en .en
    AddLanguage et .ee
    AddLanguage fr .fr
    AddLanguage de .de
    AddLanguage el .el
    AddLanguage it .it
    AddLanguage ja .ja
    AddCharset ISO-2022-JP .jis
    AddLanguage pl .po
    AddCharset ISO-8859-2 .iso-pl
    AddLanguage pt .pt
    AddLanguage pt-br .pt-br
    AddLanguage ltz .lu
    AddLanguage ca .ca
    AddLanguage es .es
    AddLanguage sv .se
    AddLanguage cz .cz

    <IfModule mod_negotiation.c>
        LanguagePriority en da nl et fr de el it ja pl pt pt-br ltz ca es sv
    

    AddType application/x-httpd-php .php .php3
    AddType application/x-httpd-php-source .phps

    AddType application/x-tar .tgz

    AddHandler cgi-script .cgi

    AddType text/html .shtml
    AddHandler server-parsed .shtml



#MetaDir .web

#MetaSuffix .meta

<IfModule mod_setenvif.c>

    BrowserMatch "Mozilla/2" nokeepalive
    BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0

    BrowserMatch "RealPlayer 4\.0" force-response-1.0
    BrowserMatch "Java/1\.0" force-response-1.0
    BrowserMatch "JDK/1\.0" force-response-1.0



<Location /ovh-status>
    SetHandler server-status
    Order deny,allow
    Deny from all
    Allow from proxy.ovh.net


NameVirtualHost xxx.xxx.xxx.xx1

<IfModule mod_gzip.c>
mod_gzip_on yes
mod_gzip_dechunk yes
mod_gzip_keep_workfiles No
mod_gzip_temp_dir /tmp
mod_gzip_minimum_file_size  1002
mod_gzip_maximum_file_size  10000000
mod_gzip_maximum_inmem_size 1000000
mod_gzip_min_http 1000

mod_gzip_item_include file \.htm$
mod_gzip_item_include file \.html$
mod_gzip_item_include mime text/.*
mod_gzip_item_include file \.php.*$
mod_gzip_item_include mime "application/x-httpd-php.*"
mod_gzip_item_include mime httpd/unix-directory
mod_gzip_item_include handler ^server-status$

mod_gzip_item_exclude       file \.css$
mod_gzip_item_exclude       file \.js$

mod_gzip_item_exclude reqheader "Via:.*1\.0 PROXY"
mod_gzip_item_exclude reqheader "Via:.*1\.0 lavoisier \(NetCache NetApp\/5\.0\.1R2\)"



<IfDefine SSL>
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl


<IfModule mod_ssl.c>

SSLPassPhraseDialog  builtin

SSLSessionCache         dbm:logs/ssl_scache
SSLSessionCacheTimeout  300

SSLMutex  file:logs/ssl_mutex

SSLRandomSeed startup builtin
SSLRandomSeed connect builtin

SSLLog      logs/ssl_engine_log
SSLLogLevel info



<IfDefine SSL>

<VirtualHost _default_:443>

#  General setup for the virtual host
DocumentRoot "/home/ovh/www"
ServerName nsxxxx.ovh.net 
ServerAdmin xxxx@ovh.net
ErrorLog logs/error_ssl_log
TransferLog logs/access_ssl_log

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt

SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars


<Directory "/usr/local/apache/cgi-bin">
    SSLOptions +StdEnvVars


SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>                                  



<VirtualHost xxx.xxx.xxx.xx1>
ServerAdmin xxxx@ovh.net
DocumentRoot /home/ovh/www
User vpopmail
Group vchkpw
ServerName nsxxxxx.ovh.net
CustomLog logs/ovh-access_log combined
ScriptAlias /cgi-bin/ /home/ovh/cgi-bin/
</VirtualHost>

#Voilà le virtualhost en question
<VirtualHost xxxx.xxxxxxxxxxxxxxx.com>
ServerAdmin aaa@aaaaa.net
DocumentRoot xxxx.xxxxxxxxxxxxxxx.com
User databecker
Group databecker
ServerName xxxx.xxxxxxxxxxxxxxx.com
CustomLog logs/databeckerfrance_log combined
</VirtualHost>
Jak59 a écrit 2 commentaires

[^] # Re: /var/log/apache/error.log

[^] # Re: ...
