From 764e6af39b3fed45c17f593d7468c767bf05d585 Mon Sep 17 00:00:00 2001 From: rspiak Date: Tue, 21 Jun 2016 09:41:36 +0200 Subject: [PATCH 1/4] Harden apache security --- manifests/apache.pp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/manifests/apache.pp b/manifests/apache.pp index 209a518..9a394bd 100644 --- a/manifests/apache.pp +++ b/manifests/apache.pp @@ -17,6 +17,10 @@ default_vhost => false, default_ssl_vhost => false, mpm_module => 'prefork', + # Security enhancements + trace_enable => 'Off', + server_signature => 'Off', + server_tokens => 'Prod', } class {'::apache::mod::php': } From 9b924742abe518a22ecaae679bb486f41385fdfa Mon Sep 17 00:00:00 2001 From: Roman Spiak Date: Tue, 21 Jun 2016 14:29:32 +0000 Subject: [PATCH 2/4] Add minor version to not interfere with upstream --- Modulefile | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 Modulefile diff --git a/Modulefile b/Modulefile new file mode 100644 index 0000000..8a15c1e --- /dev/null +++ b/Modulefile @@ -0,0 +1,11 @@ +name 'rspiak-racktables' +version '0.3.3-1' +source 'https://github.com/sgnl05/sgnl05-racktables' +author 'rspiak' +license 'Apache License, Version 2.0' +summary 'Module to deploy racktables' +description 'UNKNOWN' +project_page 'https://github.com/rspiak/sgnl05-racktables' + +## Add dependencies, if any: +# dependency 'username/name', '>= 1.2.0' From e54a6f5444dc8ae7abb54c464b256fcbfacf0cb7 Mon Sep 17 00:00:00 2001 From: Roman Spiak Date: Tue, 21 Jun 2016 14:37:57 +0000 Subject: [PATCH 3/4] Fixed link --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d7401d8..c7e5cef 100644 --- a/README.md +++ b/README.md @@ -306,4 +306,4 @@ Should work, but has not been tested. ###Contributing -Please use the issue tracker (https://github.com/sgnl05/sgnl05-racktables/issues) for any type of contribution. +Please use the issue tracker (https://github.com/rspiak/sgnl05-racktables/issues) for any type of contribution. From d9a2cea449fb73ea54db1437aafcd9697f4b7eef Mon Sep 17 00:00:00 2001 From: rspiak Date: Tue, 21 Jun 2016 16:49:08 +0200 Subject: [PATCH 4/4] Update CHANGELOG.md --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index d5919da..c26504f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,6 @@ +### 0.3.3-1 2016-06-21 + update: harden apache security (#9) by Roman Spiak + ### 0.3.3 2015-10-26 update: Permit user-determined secret.php contents (#8) by Matt Simmons