Adobe® ColdFusion® 10 Server Lockdown Guide

If Apache (httpd) was already installed, ensure that the latest version is installed:
# yum update httpd
Ensure that the latest version of openssl and mod_ssl is installed as well using similar yum commands as
above.
Remove any unneeded modules, for example:
# yum erase php*
Edit the /etc/httpd/conf/httpd.conf and remove or comment out (by placing a # at the beginning of the
line) any LoadModule lines that load unnecessary modules. You can easily find a list of these module by
running:
# fgrep LoadModule /etc/httpd/conf/httpd.conf
Some modules that you may be able to remove include: mod_imap, mod_info, mod_userdir, mod_status,
mod_cgi, mod_autoindex
See Appendix A.7 and A.8 for more information on securing the Apache Web Server.
2.3.5 Create users and groups for ColdFusion and Apache
Create a new group to contain both Apache and ColdFusion, in this guide we use the name webservices
feel free to choose a unique name.
# groupadd webservices
The Apache web server runs as user apache by default on Red Hat Enterprise Linux 5. Add apache to the
webservices group:
# usermod -a -G webservices apache
28