Adobe® ColdFusion® 10 Server Lockdown Guide
Adobe® ColdFusion® 10 Server Lockdown Guide Adobe® ColdFusion® 10 Server Lockdown Guide
In the Advanced Security Settings Dialog click the Edit Button: Uncheck the checkbox labeled Include inheritable permissions from this object’s parent. A confirmation box will appear, select remove: 8
Table 2.2.3.1 Web Root Content Security Permissions User / Group Permissions Administrators (or equivalent users and groups) Full Control iisservice (Your Application Pool Identity User) • List folder / read data • Read attributes • Read extended attributes • Read permissions IUSR (the anonymous authentication account) • List folder / read data • Read attributes • Read extended attributes • Read permissions 9
- Page 1 and 2: Adobe ColdFusion 10 Server Lockdown
- Page 3 and 4: Section 2: Installation Prerequisit
- Page 6 and 7: Next create a new user for the IIS
- Page 10 and 11: User / Group Permissions cfusion (Y
- Page 12 and 13: Next Click Add Roles, and select th
- Page 14 and 15: Review the list of Role Services an
- Page 16 and 17: Under Process Model change the Iden
- Page 18 and 19: URI Purpose Safe to Block /CFIDE/ad
- Page 20 and 21: CFIDE/ServerManager Contains the AI
- Page 22 and 23: Table 2.2.8.1 : CFIDE URIs Addition
- Page 24 and 25: Next click on Sites and Add Web Sit
- Page 27 and 28: 2.3 Prerequisites for a RedHat Ente
- Page 29 and 30: Create a user for ColdFusion to run
- Page 31 and 32: SSLRequireSSL The above requires t
- Page 34 and 35: Do not install ColdFusion 10 ODBC S
- Page 36 and 37: Select an install directory, a non-
- Page 39 and 40: Choose a strong password and unique
- Page 41 and 42: Section 4 - Post ColdFusion Install
- Page 43 and 44: 4.1.3 Specify Log On User for ColdF
- Page 45 and 46: When the ColdFusion IIS connector i
- Page 47 and 48: 4.1.8 Remove Unused Handler Mapping
- Page 49 and 50: without these settings enabled so y
- Page 51 and 52: -bin /usr/sbin/httpd \ -script /etc
- Page 53 and 54: # cp jvm.config jvm.config.backup T
- Page 55 and 56: connectionTimeout="20000" redirectP
- Page 57 and 58: Section 5: ColdFusion Administrator
Table 2.2.3.1 Web Root Content Security Permissions<br />
User / Group Permissions<br />
Administrators (or equivalent users and groups) Full Control<br />
iisservice (Your Application Pool Identity User) • List folder / read data<br />
• Read attributes<br />
• Read extended attributes<br />
• Read permissions<br />
IUSR (the anonymous authentication account) • List folder / read data<br />
• Read attributes<br />
• Read extended attributes<br />
• Read permissions<br />
9
Change language