��

�� : en | fr | ko | tr

�� ֽ�� ƴմϴ�. �ֱٿ� �� ϼ��.

�� �Ҷ� �� Ʈ�� ̴�. � �� Ϲ��̰�, � �� ġ�� ش��ϴ� ��̴�.

�ֽ�� ϱ�
ServerRoot ��丮 ��
Server Side Includes
�Ϲ�� CGI
ScriptAlias�� CGI
ScriptAlias�� CGI
�� ϴ� �ٸ� ��
�ý�� ȣ�ϱ�
�⺻�� ִ� �� ȣ�ϱ�
�α� ��캸��

��

Comments

�ֽ�� ϱ�

��ġ �� ü�� ϴ�. �׷�� ũ�� ۰� ��ǥ�� ߰ߵǴ� �� . �׷�� Ʈ�� �ֽŹ�� ϴ� �� ߿��ϴ�. ��ġ�� ٿ�ε��ߴٸ�, ��ο� �� Ʈ�� ˷��ִ� ��ġ �� ǥ ��ϸ��Ʈ�� ϱ� �� Ѵ�. ��ġ ��Ʈ�� ��ϴ� �� ڵ鵵 �� 񽺸� ��Ѵ�.

�� ڵ嶧�� ϴ� �� ʴ�. �׺�� ߰� �ڵ�, CGI ��ũ��Ʈ, �� ü�� ϴ� ��찡 ��. �׷��Ƿ� �׻� ��ϸ� �ý�� Ʈ�� ��Ʈ�ؾ� �Ѵ�.

�� root ��ڰ� ��ġ�� , ��û�� ϱ�� User ��þ�� ڷ� ��ȯ�Ѵ�. root�� ϴ� ��ɾ �ִٸ�, root �̿�� ڰ� �� ϵ�� ؾ� �Ѵ�. �� ϵ�� root�� ־�� ϰ�, ��丮�� 丮�� . �� , ServerRoot�� /usr/local/apache�� Ѵٸ� root ��ڰ� �� 丮�� Ѵ�:

mkdir /usr/local/apache cd /usr/local/apache mkdir bin conf logs chown 0 . bin conf logs chgrp 0 . bin conf logs chmod 755 . bin conf logs

�׷�� /, /usr, /usr/local �� root�� ִ�. httpd �� ġ�Ҷ� �� ȣ�ؾ� �Ѵ�:

cp httpd /usr/local/apache/bin chown 0 /usr/local/apache/bin/httpd chgrp 0 /usr/local/apache/bin/httpd chmod 511 /usr/local/apache/bin/httpd

htdocs ��丮�� ٸ� ��ڵ�� ֵ�� ִ� -- root�� װ�� ִ� �� , �� ʾƾ� �Ѵ�.

root�� ƴ� ��ڰ� root�� ϰų� ��Ⱑ�� ִٸ� �ý�� root �� ĥ �� ִ�. �� , �� httpd �� Ͽ��ٸ� �� Ҷ� �� ڵ带 ��ϰ� �ȴ�. logs ��丮�� (root�� ƴ� ��ڿ��) ��Ⱑ��ϴٸ� �� α�� ٸ� �ý��Ϸ� �ɺ��ũ�� ɾ root�� Ͽ� �� ڷḦ �� �� ִ�. �α�� (root�� ƴ� ��ڿ��) ��Ⱑ��ϴٸ� �� α׿� �̻�� ڷḦ �� ִ�.

Server Side Includes

Server Side Includes (SSI)�� ڿ�� Ȼ� ��� ̴�.

ù��° �� ϸ� �ø�� ̴�. ��ġ�� Ͽ� SSI ��þ �ִ�� ο� �� SSI �� м��ؾ� �Ѵ�. �� ϰ� ��, �� ϴ� ȯ�濡�� ɰ�� ִ�.

��, SSI �� Ϲ�� CGI ��ũ��Ʈ�� . SSI ��Ͽ�� "exec cmd"�� ϸ� httpd.conf�� ġ�� ϵ�� ڿ� �׷� �� CGI ��ũ��Ʈ�� α׷�� ִ�.

�� Ȱ��ϸ鼭 SSI �� Ű�� ִ�.

SSI �� ִ� ��ظ� �ݸ��ϱ�� ڴ� �Ϲ�� CGI �� ϴ� �� suexec�� ִ�

.html�̳� .htm Ȯ��ڸ� SSI ��Ϸ� ��ϴ� �� ϴ�. Ư�� ϰų� ��ŷ�� ȯ�濡�� ϴ�. SSI �� Ϲ�� ϴ� .shtml �� Ȯ��ڸ� �� Ѵ�. �׷�� ϸ� �ּ�ȭ�ϰ� ��Ҹ� �� ִ�.

�ٸ� �� SSI �� ũ��Ʈ�� α׷�� ϵ�� ̴�. Options ��þ�� Includes �� IncludesNOEXEC�� Ѵ�. �׷�� ũ��Ʈ�� ScriptAlias ��þ�� 丮�� ִٸ� <--#include virtual="..." -->�� Ͽ� CGI ��ũ��Ʈ�� ϶�.

�Ϲ�� CGI

�ᱹ �� ׻� CGI ��ũ��Ʈ/��α׷�� ڸ� �ŷ��ؾ� �ϰ�, ��ǰ� �Ǽ��̰� CGI�� Ȼ� �� ߰�� ־�� Ѵ�. �⺻�� CGI ��ũ��Ʈ�� ý��ۿ��  ��ɾ�� ֱ⶧�� ְ� Ȯ�� ſ� ��ϴ�.

�� CGI ��ũ��Ʈ�� ڷ� ��Ǳ⶧�� ٸ� ��ũ��Ʈ�� (��ǰ� �Ǽ��̰�) �浹�� ɼ�� ִ�. �� , �� A�� B�� ſ� �Ⱦ��Ͽ�, �� B�� CGI ��ͺ��̽�� ũ��Ʈ�� ۼ�� ִ�. ��ġ 1.2 �� ԵǾ�� ġ �� Ư�� (hook)�� ϴ� suEXEC�� ũ��Ʈ�� ٸ� ��ڷ� ��ϴ� �� ϳ��. �ٸ� �� CGIWrap�� ִ�.

ScriptAlias�� CGI

�� Ҷ�� ڰ� � ��丮�� CGI ��ũ��Ʈ�� ϵ�� ִ�:

�� ǰ� �Ǽ��̰� ��ڰ� �ý�� ݿ� ��Ű�� ũ��Ʈ�� ۼ�� ʴ´ٰ� �ϴ´�.
�ý�� ٸ� �κ�� ؼ�, �� ϳ� ��  �� ٰ� ��ϴ� ��.
��ڰ� ��, �Ƹ� �ƹ�� 湮��ʴ� ��.

ScriptAlias�� CGI

Ư�� 丮�� CGI�� ֵ�� ϸ� ��ڴ� �̵� ��丮�� ִ�. �� scriptalias�� CGI�� Ȯ�� ϴ�. ��, �ŷ��ϴ� ��ڸ� ��丮�� ְ�, ��ڰ� ��ο� CGI ��ũ��Ʈ/��α׷�� Ȼ� �� ˻�� ̰� �ִٸ�.

��κ�� Ʈ�� scriptalias�� CGI �� Ѵ�.

�� ϴ� �ٸ� ��

mod_php, mod_perl, mod_tcl, mod_python �� Ϻη� ��ϴ� �Ӻ�� ũ��Ʈ�� ڷ� (User ��þ� ��) ��Ǳ⶧��, ��ũ��Ʈ �� ϴ� ��ũ��Ʈ�� ڰ� �� ִ� �� Ϳ� �� ִ�. � ��ũ��Ʈ �� , ��ϴٰ� �� ʴ� �� .

�ý�� ȣ�ϱ�

�� �Ϸ�� ڰ� .htaccess �� Ͽ� �� ȱ�� ϱ� �ٶ�� ̴�. �׷�� ִ�.

�� Ͽ� �� ߰��Ѵ�

<Directory /> AllowOverride None </Directory>

�׷�� 밡��ϵ�� 丮�� ϰ�� .htaccess �� .

�⺻�� ִ� �� ȣ�ϱ�

�� ġ�� ⺻ ��ٿ� �� ߸� �˰��ִ�. ��, �� Ϲ�� URL �� Ģ�� Ͽ� �� ã�� ִٸ�, Ư�� ġ�� ʴ�� Ŭ��̾�Ʈ�� 񽺵� �� ִ�.

�� , �Ʒ�� :

# cd /; ln -s / public_html http://localhost/~root/ �� Ѵ�

�׷�� Ŭ��̾�Ʈ�� ü ��Ͻý�� ƴٴ� �� ִ�. �̸� �� ġ�� Ѵ�:

<Directory /> Order Deny,Allow Deny from all </Directory>

�׷�� Ͻý�� ġ�� ⺻ �� źεȴ�. ��ϴ� �� ֵ�� Directory �� ߰��Ѵ�.

<Directory /usr/users/*/public_html> Order Deny,Allow Allow from all </Directory> <Directory /usr/local/httpd> Order Deny,Allow Allow from all </Directory>

Location�� Directory ��þ �� ϴ� �� Ư�� Ǹ� ��￩��. �� , <Directory />�� ź��ϴ�� <Location /> ��þ �̸� �� ִ�

UserDir ��þ ��ϴ� ��쿡�� ϶�. ��þ "./" �� ϸ� root ��ڿ� �� ٷ� �� ߻��Ѵ�. ��ġ 1.3 �̻�� Ѵٸ� �� Ͽ� �Ʒ� �� ߰��ϱ� �� Ѵ�:

UserDir disabled root

�α� ��캸��

�� ־�� ִ�� ˷�� α�� Ѵ�. �α�� ̹� �Ͼ �ϸ�� , ��  �� ־�� ˷��ְ� �� ʿ�� ŭ �� Ȯ��ϰ� ��ش�.

�� :

grep -c "/jsp/source.jsp?/jsp/ /jsp/source.jsp??" access_log grep "client denied" error_log | tail -n 10

ù��° �� ߸�� Source.JSP ��û�� ˾Ƴ� �� ִ� Tomcat�� ̿��Ϸ�� Ƚ�� ˷��ְ�, �ι�° �� źε� �ֱ� Ŭ��̾�Ʈ 10�� ش�:

[Thu Jul 11 17:18:39 2002] [error] [client foo.bar.com] client denied by server configuration: /usr/local/apache/htdocs/.htpasswd

�� α�� ̹� �߻�� Ǹ�� Ѵ�. �׷�� Ŭ��̾�Ʈ�� .htpasswd ��Ͽ� �� ־��ٸ� �� α�� ̴�:

foo.bar.com - - [12/Jul/2002:01:59:13 +0200] "GET /.htpasswd HTTP/1.1"

��, �� Ͽ�� κ�� ּ�ó�� ̴�:

<Files ".ht*"> Order allow,deny Deny from all <Files>

���� ��

����

��

��