Apache2在Debian上的安全设置

2025年7月5日 互联网

Apache2在Debian上的安全设置包括多个方面，以下是一些关键的安全配置步骤和最佳实践：

SSH安全设置

  • 关闭root用户远程登录： 
    sudo vim /etc/ssh/sshd_config
PermitRootLogin no
  • 限定用户只能使用密钥登录： 
    PasswordAuthentication no

Apache2安全设置

  • 隐藏Apache的版本信息： 
    sudo vim /etc/apache2/conf.d/security
ServerSignature off
ServerTokens Prod
  • 取消索引功能：
    编辑 /etc/apache2/sites-available/default 文件，使用“-”注释掉 Index, FollowSymLinks, MultiViews。
  • 启用SSL模块： 
    sudo a2enmod ssl
  • 创建支持HTTPS的虚拟主机配置文件： 
    sudo cp /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-available/001-ssl.conf
sudo nano /etc/apache2/sites-available/001-ssl.conf
# 设置ServerName和DocumentRoot
SSLEngine on
SSLCertificateFile /path/to/certificate.crt
SSLCertificateKeyFile /path/to/private.key
  • 配置防火墙：
    使用 ufw 允许HTTP和HTTPS服务的端口：

    sudo ufw allow http
sudo ufw allow https

PHP安全设置（如果使用PHP）

  • 开启安全模式：
    编辑 /etc/php5/apache2/php.ini 文件，设置 safe_mode on。
  • 取消向客户端返回错误： 
    disable_error=off
  • 记录出错日志： 
    log_error=on
error_log=/var/log/php_errors.log
  • 设置部分函数无效： 
    disable_function=eval,exec,system,passthru,shell_exec,open_basedir,mail_function,exec,link,unlink,rename,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,remove,mkdir,rmdir,copy,rename,chdir,
最新文章