Search This Blog

Friday, June 11, 2010

visudo, apache, apachemon, logrotate

visudo

# Runas alias specification
# User privilege specification
root ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL

# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL

# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now

hom ALL=NOPASSWD: /sbin/rcSuSEfirewall2 *, /bin/vi /etc/samba/smb.conf

webmaster ALL=NOPASSWD: /etc/init.d/apache2 *, !/sbin/yast2, /sbin/yast2 http-server, /bin/vi /etc/sysconfig/apache2, /bin/vi /etc/apache2/*.conf, /usr/bin/htpasswd2
..................................................................................

vi /etc/apache2/default-server.conf

ServerAdmin webmaster@xxx



Order deny,allow
Deny from all
Allow from 192.168.1.0/24

AuthType Basic
AuthName "Restricted Area"
AuthUserFile /etc/apache2/htpasswd
Require valid-user


# apache2ctl configtest
# insserv apache2

--------------------------------------------

#!/bin/bash
top -b -u wwwrun -n $1 >
/home/webmaster/monitoring/apachemon-`date +%F-%H:%M

--------------------------------------------


# this is for the old acpid
vi /etc/logrotate.d/pure-ftpd

/var/log/pure-ftpd.log {
daily
compress
dateext
rotate 99
postrotate
/etc/init.d/syslog reload
endscript
}

# logrotate -f /etc/logrotate.d/pure-ftpd.logvisudo

.........................................................................................

No comments:

Post a Comment