avp::ptr weblog

Everything that is in our mind.

Archive for the ‘apache’ tag

How to set the ownerchip for NTFS partitions mounted from Ubuntu?

without comments

To mount an NTFS partition under Ubuntu you need to edit the configuration in /etc/fstab. Though, when successfully mounted there still is a good chance that the access rights to the partition are not as you want them to be. You cannot changed them with chmod command. Instead you need to set the umask for the mounted partition. In general umask 007 would be satisfying. But in case you run a service that reads from the partition as an anonymous user umask 006 is needed, e.g. an apache web server.

UUID=1973945397942 /media/data ntfs defaults,umask=006,uid=1000,gid=1000 0 0

You can find more information on umask here. This article was inspired by this post by Andrew Martin.

Written by tobi

July 29th, 2011 at 12:36 pm

How to deactivate the server signature for Apache2?

without comments

Every time a url is requested that does not exist on a webserver an error page is displayed. By default, the page is trailed by the signature of the server. The signature includes information about the webserver version, the operating system, installed modules like PHP, Python, SSL and many more.

As everyone knows, there is no software out there without security problems. Those versions of the installed modules can be used to attack the server. Therefore, it is a good idea to reduce or deactivate the signature.

The apache configuration file apache2.conf contains two settings that allow modifications for this subject. The default settings are displayed here.

ServerSignature = Full
ServerTokens = Prod

The following screenshot shows what would be displayed with the setting:

ServerSignature = Prod

Apache configuration: ServerTokens = Prod
The apache documentation provides more information and examples on how to change the signature.

Another way to display the information attached to the server signature is to use the Firefox add-on Live HTTP Headers.

Written by tobi

September 29th, 2010 at 7:58 pm