“沙盒”的版本间的差异

2016年6月7日 (二) 14:04的版本

缺省设置

---

这一节介绍Apache2服务器的缺省设置。例如，如果你添加一个虚拟主机，缺省配置要优先于其他的虚拟主机设置，对于没有定义虚拟主机，缺省设置将被使用。

1. DirectoryIndex是默认页面，当用户请求服务器目录时指定斜杠(/)的目录名称后将被使用。
   例如，当用户请求http://www.example.com/this_directory/时，他或她得到DirectoryIndex指定的页如果这个页面存在，对于服务器生成的目录列表，如果没有Indexes选项被指定，或者页面的访问权限被拒绝。服务器将尝试发现DirectoryIndex指令指定的文件，如果有或有多个则第一个将返回给请求。If it does not find any of these files and if Options Indexes is set for that directory, the server will generate and return a list, in HTML format, of the subdirectories and files in the directory. The default value, found in /etc/apache2/mods-available/dir.conf is "index.html index.cgi index.pl index.php index.xhtml index.htm". Thus, if Apache2 finds a file in a requested directory matching any of these names, the first will be displayed.
2. The ErrorDocument directive allows you to specify a file for Apache2 to use for specific error events. For example, if a user requests a resource that does not exist, a 404 error will occur. By default, Apache2 will simply return a HTTP 404 Return code. Read /etc/apache2/conf.d/localized-error-pages for detailed instructions for using ErrorDocument, including locations of example files.
3. By default, the server writes the transfer log to the file /var/log/apache2/access.log. You can change this on a per-site basis in your virtual host configuration files with the CustomLog directive, or omit it to accept the default, specified in /etc/apache2/conf.d/other-vhosts-access-log. You may also specify the file to which errors are logged, via the ErrorLog directive, whose default is /var/log/apache2/error.log. These are kept separate from the transfer logs to aid in troubleshooting problems with your Apache2 server. You may also specify the LogLevel (the default value is "warn") and the LogFormat (see /etc/apache2/apache2.conf for the default value).
4. Some options are specified on a per-directory basis rather than per-server. Options is one of these directives. A Directory stanza is enclosed in XML-like tags, like so: <Directory /var/www/mynewsite>
...
</Directory>
   The Options directive within a Directory stanza accepts one or more of the following values (among others), separated by spaces:

1. ExecCGI - Allow execution of CGI scripts. CGI scripts are not executed if this option is not chosen.

   Most files should not be executed as CGI scripts. This would be very dangerous. CGI scripts should kept in a directory separate from and outside your DocumentRoot, and only this directory should have the ExecCGI option set. This is the default, and the default location for CGI scripts is /usr/lib/cgi-bin.

2. Includes - Allow server-side includes. Server-side includes allow an HTML file to include other files. See Apache SSI documentation (Ubuntu community) for more information.
3. IncludesNOEXEC - Allow server-side includes, but disable the #exec and #include commands in CGI scripts.
4. Indexes - Display a formatted list of the directory's contents, if no DirectoryIndex (such as index.html) exists in the requested directory.

   For security reasons, this should usually not be set, and certainly should not be set on your DocumentRoot directory. Enable this option carefully on a per-directory basis only if you are certain you want users to see the entire contents of the directory.

5. Multiview - Support content-negotiated multiviews; this option is disabled by default for security reasons. See the Apache2 documentation on this option.
6. SymLinksIfOwnerMatch - Only follow symbolic links if the target file or directory has the same owner as the link.