Shulou(Shulou.com)06/01 Report--

This article will explain in detail how to build a secure CentOS server. The content of the article is of high quality, so the editor shares it for you as a reference. I hope you will have a certain understanding of the relevant knowledge after reading this article.

In a variety of servers, CentOS server is a leader, with its own advantages, CentOS server has been supported by a lot of netizens. So, how to guarantee the security of CentOS server? Next, we give a good solution to some security problems of CentOS server.

1. Enable security mode (servers for commercial applications are not recommended)

Code:

# vi / usr/local/Zend/etc/php.ini (php.ini file location is: / etc/php.ini when ZO is not installed).

Safe_mode = On

2. Lock the application directory of PHP program

Code:

# vi / etc tpd/conf.d irtualhost.conf

Php_admin_value open_basedir / home/*** (* * is the site directory)!

3. Never give write permission to unnecessary directories, that is, 777 permissions. The root directory remains at 711 permissions. If you cannot run PHP, please change it to 755.

4. Shield PHP unsafe parameters (webshell)

Code: # vi / usr/local/Zend/etc/php.ini (php.ini file location is: / etc/php.ini when ZO is not installed)

Disable_functions = system,exec,shell_exec,passthru,popen..

The following is my server screen parameters: copyright notice: this site articles are from the network.

Code:

Disable_functions = passthru,exec,shell_exec,system,set_time_limit,ini_alter,dl,.

Pfsockopen,openlog,syslog,readlink,symlink,link,leak,fsockopen,popen,escapeshell..

Cmd,error_log.

On how to create a secure CentOS server to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.