Bearbeiten von „Server/SRS28“

== Ports ==

=== installierte Ports ===
* [[#apache22 | apache22]]
* [[#apr | apr]]
* autoconf
* autoconf-wrapper
* automake
* automake-wrapper
* db41
* db42
* expat
* [[#gdbm | gdbm]]
* gettext
* gmake
* [[Server/Jails#help2man | help2man]]
* libsigsegv
* [[Server/Jails#libiconv | libiconv]]
* libtool
* libxml2
* [[Server/Jails#m4| m4]]
* p5-Locale-gettext
* [[Server/Jails#pcre | pcre]]
* [[Server/Jails#perl | perl-threaded]]
* [[#php5 | php5]]
* pkgconf
* [[Server/Jails#portupgrade | portupgrade]]
* [[#python27 | python27]]
* [[Server/Jails#ruby | ruby]]
* ruby18-bdb
* [[#sudo | sudo]]
* [[Server/Jails#zsh | zsh]]


=== konfigurierte Ports ===

==== apache22 ====

 <code>
 OPTIONS_FILE_SET+=AUTH_BASIC
 OPTIONS_FILE_SET+=AUTH_DIGEST
 OPTIONS_FILE_SET+=AUTHN_ALIAS
 OPTIONS_FILE_SET+=AUTHN_ANON
 OPTIONS_FILE_UNSET+=AUTHN_DBD
 OPTIONS_FILE_SET+=AUTHN_DBM
 OPTIONS_FILE_SET+=AUTHN_DEFAULT
 OPTIONS_FILE_SET+=AUTHN_FILE
 OPTIONS_FILE_SET+=AUTHZ_DBM
 OPTIONS_FILE_SET+=AUTHZ_DEFAULT
 OPTIONS_FILE_SET+=AUTHZ_GROUPFILE
 OPTIONS_FILE_SET+=AUTHZ_HOST
 OPTIONS_FILE_SET+=AUTHZ_OWNER
 OPTIONS_FILE_SET+=AUTHZ_USER
 OPTIONS_FILE_UNSET+=AUTHNZ_LDAP
 OPTIONS_FILE_UNSET+=LDAP
 OPTIONS_FILE_UNSET+=DBD
 OPTIONS_FILE_SET+=CACHE
 OPTIONS_FILE_SET+=DISK_CACHE
 OPTIONS_FILE_SET+=FILE_CACHE
 OPTIONS_FILE_SET+=MEM_CACHE
 OPTIONS_FILE_SET+=DAV
 OPTIONS_FILE_SET+=DAV_FS
 OPTIONS_FILE_UNSET+=DAV_LOCK
 OPTIONS_FILE_SET+=ACTIONS
 OPTIONS_FILE_SET+=ALIAS
 OPTIONS_FILE_SET+=ASIS
 OPTIONS_FILE_SET+=AUTOINDEX
 OPTIONS_FILE_SET+=CERN_META
 OPTIONS_FILE_UNSET+=CGI
 OPTIONS_FILE_UNSET+=CGID
 OPTIONS_FILE_SET+=CHARSET_LITE
 OPTIONS_FILE_SET+=DEFLATE
 OPTIONS_FILE_SET+=DIR
 OPTIONS_FILE_SET+=DUMPIO
 OPTIONS_FILE_SET+=ENV
 OPTIONS_FILE_SET+=EXPIRES
 OPTIONS_FILE_SET+=HEADERS
 OPTIONS_FILE_SET+=IMAGEMAP
 OPTIONS_FILE_SET+=INCLUDE
 OPTIONS_FILE_SET+=INFO
 OPTIONS_FILE_SET+=LOG_CONFIG
 OPTIONS_FILE_SET+=LOGIO
 OPTIONS_FILE_SET+=MIME
 OPTIONS_FILE_SET+=MIME_MAGIC
 OPTIONS_FILE_SET+=NEGOTIATION
 OPTIONS_FILE_SET+=REWRITE
 OPTIONS_FILE_SET+=SETENVIF
 OPTIONS_FILE_SET+=SPELING
 OPTIONS_FILE_SET+=STATUS
 OPTIONS_FILE_UNSET+=UNIQUE_ID
 OPTIONS_FILE_UNSET+=USERDIR
 OPTIONS_FILE_UNSET+=USERTRACK
 OPTIONS_FILE_SET+=VHOST_ALIAS
 OPTIONS_FILE_SET+=FILTER
 OPTIONS_FILE_UNSET+=SUBSTITUTE
 OPTIONS_FILE_SET+=VERSION
 OPTIONS_FILE_SET+=SSL
 OPTIONS_FILE_UNSET+=SUEXEC
 OPTIONS_FILE_UNSET+=SUEXEC_RSRCLIMIT
 OPTIONS_FILE_UNSET+=SUEXEC_USERDIR
 OPTIONS_FILE_SET+=REQTIMEOUT
 OPTIONS_FILE_SET+=PROXY
 OPTIONS_FILE_UNSET+=IPV4_MAPPED
 OPTIONS_FILE_UNSET+=BUCKETEER
 OPTIONS_FILE_UNSET+=CASE_FILTER
 OPTIONS_FILE_UNSET+=CASE_FILTER_IN
 OPTIONS_FILE_UNSET+=EXT_FILTER
 OPTIONS_FILE_UNSET+=LOG_FORENSIC
 OPTIONS_FILE_UNSET+=OPTIONAL_HOOK_EXPORT
 OPTIONS_FILE_UNSET+=OPTIONAL_HOOK_IMPORT
 OPTIONS_FILE_UNSET+=OPTIONAL_FN_IMPORT
 OPTIONS_FILE_UNSET+=OPTIONAL_FN_EXPORT
 OPTIONS_FILE_UNSET+=PROXY_AJP
 OPTIONS_FILE_UNSET+=PROXY_BALANCER
 OPTIONS_FILE_SET+=PROXY_CONNECT
 OPTIONS_FILE_UNSET+=PROXY_FTP
 OPTIONS_FILE_SET+=PROXY_HTTP
 OPTIONS_FILE_UNSET+=PROXY_SCGI
 </code>

==== apr ====

 <code>
 OPTIONS_FILE_SET+=THREADS
 OPTIONS_FILE_SET+=IPV6
 OPTIONS_FILE_SET+=DEVRANDOM
 OPTIONS_FILE_SET+=BDB
 OPTIONS_FILE_SET+=GDBM
 OPTIONS_FILE_UNSET+=LDAP
 OPTIONS_FILE_UNSET+=MYSQL
 OPTIONS_FILE_UNSET+=NDBM
 OPTIONS_FILE_UNSET+=PGSQL
 OPTIONS_FILE_UNSET+=SQLITE
 </code>

==== gdbm ====

 <code>
 WITHOUT_COMPAT=true
 </code>

==== [[Server/Jails#help2man | help2man]] ====

==== [[Server/Jails#libiconv | libiconv]] ====

==== [[Server/Jails#m4| m4]] ====

==== [[Server/Jails#pcre | pcre]] ====

==== [[Server/Jails#perl | perl-threaded]] ====

==== php5 ====

 <code>
 OPTIONS_FILE_SET+=CLI
 OPTIONS_FILE_SET+=CGI
 OPTIONS_FILE_UNSET+=FPM
 OPTIONS_FILE_UNSET+=APACHE
 OPTIONS_FILE_UNSET+=AP2FILTER
 OPTIONS_FILE_SET+=EMBED
 OPTIONS_FILE_SET+=DEBUG
 OPTIONS_FILE_UNSET+=DTRACE
 OPTIONS_FILE_SET+=IPV6
 OPTIONS_FILE_SET+=MAILHEAD
 OPTIONS_FILE_SET+=LINKTHR
 </code>

==== [[Server/Jails#portupgrade | portupgrade]] ====

==== python27 ====

 <code>
 OPTIONS_FILE_SET+=EXAMPLES
 OPTIONS_FILE_UNSET+=FPECTL
 OPTIONS_FILE_SET+=IPV6
 OPTIONS_FILE_SET+=NLS
 OPTIONS_FILE_UNSET+=PTH
 OPTIONS_FILE_SET+=PYMALLOC
 OPTIONS_FILE_UNSET+=SEM
 OPTIONS_FILE_SET+=THREADS
 OPTIONS_FILE_UNSET+=UCS2
 OPTIONS_FILE_SET+=UCS4
 </code>

==== [[Server/Jails#ruby | ruby]] ====

==== sudo ====

 <code>
 OPTIONS_FILE_SET+=AUDIT
 OPTIONS_FILE_UNSET+=DISABLE_AUTH
 OPTIONS_FILE_SET+=DISABLE_ROOT_SUDO
 OPTIONS_FILE_UNSET+=INSULTS
 OPTIONS_FILE_UNSET+=LDAP
 OPTIONS_FILE_SET+=NLS
 OPTIONS_FILE_UNSET+=NOARGS_SHELL
 OPTIONS_FILE_UNSET+=OPIE
 </code>

==== [[Server/Jails#zsh | zsh]] ====

=== zusätzliche Konfigurationsdateien ===

==== Jail ====

===== /etc/rc.conf =====

 <code>
 apache22_enable="YES"
 sshd_enable="YES"
 </code>

==== apache ====

===== httpd.conf =====

 <code>
 …
 LoadModule php5_module        libexec/apache22/libphp5.so
 
 <IfModule php5_module>
    DirectoryIndex index.php index.php5 index.html
    AddType application/x-httpd-php .php
    AddType application/x-httpd-php-source .phps
 </IfModule>
 …
 ServerAdmin <admin[at]domain.tld>
 …
 ServerName <Jail-IP>
 …
 DocumentRoot "/usr/local/www/data"
 …
 <Directory "/usr/local/www/data/website">
    #
    # Possible values for the Options directive are "None", "All",
    # or any combination of:
    #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
    #
    # Note that "MultiViews" must be named *explicitly* --- "Options All"
    # doesn't give it to you.
    #
    # The Options directive is both complicated and important.  Please see
    # http://httpd.apache.org/docs/2.2/mod/core.html#options
    # for more information.
    #
    Options Indexes FollowSymLinks
    DirectoryIndex index.php index.php5 index.html
    #
    # AllowOverride controls what directives may be placed in .htaccess files.
    # It can be "All", "None", or any combination of the keywords:
    #   Options FileInfo AuthConfig Limit
    #
    AllowOverride None
 
    #
    # Controls who can get stuff from this server.
    #
    Order allow,deny
    Allow from all
 
 </Directory>
 …
 </code>

==== sshd ====

===== sshd_config =====

 <code>
 …
 Port <PORTNUMMER>
 …
 ListenAddress 0.0.0.0
 …
 LoginGraceTime 1m
 PermitRootLogin no
 StrictModes yes
 MaxAuthTries 3
 MaxSessions 4
 AllowUsers <die mit der richtigen permisse> #nur durch leerzeichen trennen
 …
 Match User <Username>
        ChrootDirectory /usr/local/www/data
        ForceCommand internal-sftp
        AllowTcpForwarding no
        X11Forwarding no
 …
 </code>

== Siehe auch ==

[[Kategorie:Rechentechnik]]
[[Kategorie:Software]]
[[Kategorie:Jail]]