Adobe® ColdFusion® 10 Server Lockdown Guide

without these settings enabled so you may encounter something unexpected. Second when a ColdFusion
update is released for the connector or if you want to add/update/delete an IIS connector you must re-enable
these role services before updating the connector.
4.2 Red Hat Enterprise Linux Post Installation
4.2.1 Install ColdFusion Hotfixes / Updates
Because Apache is not fully configured yet you will need to login to the ColdFusion administrator via the built-in
web server, eg http://localhost:8500/
Click on Server Updates > Updates and then select the latest hotfix, and click Download.
Verify the integrity of the download by performing an md5sum on the hotfix_XXX.jar file, see that it matches the
value found in Adobe ColdFusion update feed: https://www.adobe.com/go/coldfusion-updates
If the md5 checksum matches install the hotfix:
/opt/coldfusion10/jre/bin/java -jar /opt/coldfusion10/cfusion/hfupdates/hotfix_XXX.jar
Replace hotfix_XXX.jar with the filename of the hotfix jar you are installing, and follow the prompts. The
installer will typically attempt to restart ColdFusion when done, you can however disable that, see
documentation for details.
4.2.2 Specify permissions on web sites:
# chown -R cfusion:webservices /web
# chmod -R 750 /web
SELinux requires permissions to allow apache to read the web root, we will copy the permissions from
/var/www (the default apache web root on RHEL 6, using the --reference flag) and apply it to /web (our
web site partition).
49