linux_wiki:network_services_overview_apache_web_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
linux_wiki:network_services_overview_apache_web_server [2018/04/07 15:49]
billdozor [Host Based]
linux_wiki:network_services_overview_apache_web_server [2019/05/25 23:50] (current)
Line 44: Line 44:
  
   * Service agnostic -> [[linux_wiki:set_enforcing_and_permissive_modes_for_selinux|Ensure SELinux is running and enabled (RHCSA objective)]].   * Service agnostic -> [[linux_wiki:set_enforcing_and_permissive_modes_for_selinux|Ensure SELinux is running and enabled (RHCSA objective)]].
 +  * **IMPORTANT**: View all label types<code bash># Install package
 +yum install setools-console
 +
 +# View all label types
 +seinfo -t
 +
 +# Find Apache types
 +seinfo -t | grep httpd
 +</code>
  
 ---- ----
Line 132: Line 141:
 Allow access through the firewall Allow access through the firewall
 <code bash> <code bash>
 +# Standard http/https ports
 firewall-cmd --permanent --add-service=http firewall-cmd --permanent --add-service=http
 firewall-cmd --permanent --add-service=https firewall-cmd --permanent --add-service=https
 +firewall-cmd --reload
 +
 +# Non-standard port example
 +firewall-cmd --permanent --add-port=8282/tcp
 firewall-cmd --reload firewall-cmd --reload
 </code> </code>
Line 142: Line 156:
 <code bash> <code bash>
 <Directory "/var/www/html"> <Directory "/var/www/html">
- +   
-  # No tests can fail+  # Blacklist "server1"
   <RequireAll>   <RequireAll>
-    Require host myserver.local +    Require all granted 
-    Require not host notmyserver.local+    Require not host server1
   </RequireAll>   </RequireAll>
      
 </Directory> </Directory>
 </code> </code>
-  * The above will allow access from myserver.local, but deny notmyserver.local from accessing the web server+  * The above will allow access from all hosts except "server1"
   * Must be inside of a <Directory> context.   * Must be inside of a <Directory> context.
 +
 ===== User Based ===== ===== User Based =====
  
  • linux_wiki/network_services_overview_apache_web_server.1523130592.txt.gz
  • Last modified: 2019/05/25 23:50
  • (external edit)