Wednesday, June 27, 2007

Debugging

strace -f -p $(cat /path/to/application.pid) 2>&1|tee trace.out

Wednesday, June 20, 2007

ServerTokens Prod, ServerSignature Off

You don't want apache to display the server version on error pages, or other pages it generates, also you should only return the server name "Apache" in each reply header so add the following 2 directives in httpd.conf

ServerSignature Off
ServerTokens Prod

While it doesn't make your server any more secure, it may make it less of a target.