Adobe® ColdFusion® 10 Server Lockdown Guide

More documents

Recommendations

Info

If you receive a 403 Forbidden response you may need to run chcon to set the SELinux context of the files, see Linux Post Installation section or Appendix A.10. Section 3 - Installing ColdFusion 3.1 Run ColdFusion Installer Run the ColdFusion 10 Installer. This guide covers the standard Server configuration option and does not cover installation as a WAR or EAR file, consult your JEE server vendor for installation specifics. The option to install ColdFusion in standalone or multiserver mode no longer exists as it did in previous versions, which allows ColdFusion 10 to use the same core directory structure even if multiple instances (Enterprise only) are used. 32
Page 1 and 2: Adobe ColdFusion 10 Server Lockdown
Page 3 and 4: Section 2: Installation Prerequisit
Page 6 and 7: Next create a new user for the IIS
Page 8 and 9: In the Advanced Security Settings D
Page 10 and 11: User / Group Permissions cfusion (Y
Page 12 and 13: Next Click Add Roles, and select th
Page 14 and 15: Review the list of Role Services an
Page 16 and 17: Under Process Model change the Iden
Page 18 and 19: URI Purpose Safe to Block /CFIDE/ad
Page 20 and 21: CFIDE/ServerManager Contains the AI
Page 22 and 23: Table 2.2.8.1 : CFIDE URIs Addition
Page 24 and 25: Next click on Sites and Add Web Sit
Page 27 and 28: 2.3 Prerequisites for a RedHat Ente
Page 29 and 30: Create a user for ColdFusion to run
Page 31: SSLRequireSSL The above requires t
Page 35 and 36: Enable the Secure Profile, and spec
Page 37: Install the connector for IIS, you
Page 40 and 41: You may consider checking the check
Page 42 and 43: The IIS Application Pool user (iiss
Page 44 and 45: If you installed any optional subco
Page 46 and 47: 4.1.6 Update Java Virtual Machine T
Page 48 and 49: 4.1.9 Handler Mapping Settings Doub
Page 50 and 51: You may consider using chmod -R 550
Page 52 and 53: We must also apply the proper SELin
Page 54 and 55: 4.2.8 Add umask to startup script E
Page 56 and 57: Please note: Changing the port sett
Page 58 and 59: Setting Default Recommendation Desc
Page 70 and 71: 5.10 Debugging & Logging > Logging
Page 72 and 73: 5.13 Security > RDS Setting Default
Page 76 and 77: In addition some servlets may depen
Page 78 and 79: MessageBrokerServlet /flex2gateway/
Page 80 and 81: CFFileServlet /CFFileServlet/* 6.1
Page 82 and 83:
6.11 Adding ClickJacking Protection
Page 84 and 85:
Appendix A: Sources of Information
Page 86 and 87:
RDS Remote Development Services XSS
show all

Adobe® ColdFusion® 10 Server Lockdown Guide

Create successful ePaper yourself

Delete template?

Save as template?