xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-09-16 07:08:21 +00:00
Code Issues Releases Wiki Activity

Apply some hardening to xCAT configuration

Browse Source
This commit is contained in:
Jarrod Johnson
2018-04-16 10:32:02 -04:00
parent 212fe9ab91
commit 7ee0c12968
5 changed files with 74 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
xCAT/xCAT.spec
View File

@@ -87,6 +87,7 @@ tar zxf %{SOURCE2}
tar zxf %{SOURCE4}
tar zxf %{SOURCE6}
tar zxf %{SOURCE8}
rm -f postscripts/sudoers
%else
rm -rf postscripts
cp %{SOURCE2} /opt/freeware/src/packages/BUILD

22
xCAT/xcat.conf
View File

@@ -8,21 +8,37 @@ AliasMatch ^/install/(.*)$ "/install/$1"
AliasMatch ^/tftpboot/(.*)$ "/tftpboot/$1"
<Directory "/tftpboot">
Options Indexes +FollowSymLinks +Includes MultiViews
AllowOverride None
Order allow,deny
Allow from all
AllowMethods GET
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
<Directory "/install">
Options Indexes +FollowSymLinks +Includes MultiViews
AllowOverride None
Order allow,deny
Allow from all
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
Alias /xcat-doc "/opt/xcat/share/doc"
<Directory "/opt/xcat/share/doc">
Options Indexes
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
AllowOverride None
Order allow,deny
Allow from all

20
xCAT/xcat.conf.apach24
View File

@@ -8,19 +8,35 @@ AliasMatch ^/install/(.*)$ "/install/$1"
AliasMatch ^/tftpboot/(.*)$ "/tftpboot/$1"
<Directory "/tftpboot">
Options Indexes FollowSymLinks Includes MultiViews
AllowOverride None
Require all granted
Options Indexes FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
<Directory "/install">
Options Indexes FollowSymLinks Includes MultiViews
AllowOverride None
Require all granted
Options Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
Alias /xcat-doc "/opt/xcat/share/doc"
<Directory "/opt/xcat/share/doc">
Options Indexes
AllowOverride None
Require all granted
Options Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>

21
xCATsn/xcat.conf
View File

@@ -8,22 +8,37 @@ AliasMatch ^/install/(.*)$ "/install/$1"
AliasMatch ^/tftpboot/(.*)$ "/tftpboot/$1"
<Directory "/tftpboot">
Options Indexes +FollowSymLinks +Includes MultiViews
AllowOverride None
Order allow,deny
Allow from all
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
<Directory "/install">
Options Indexes +FollowSymLinks +Includes MultiViews
AllowOverride None
Order allow,deny
Allow from all
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
Alias /xcat-doc "/opt/xcat/share/doc"
<Directory "/opt/xcat/share/doc">
Options Indexes
AllowOverride None
Order allow,deny
Allow from all
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>

21
xCATsn/xcat.conf.apach24
View File

@@ -8,20 +8,35 @@ AliasMatch ^/install/(.*)$ "/install/$1"
AliasMatch ^/tftpboot/(.*)$ "/tftpboot/$1"
<Directory "/tftpboot">
Options Indexes FollowSymLinks Includes MultiViews
AllowOverride None
Require all granted
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
<Directory "/install">
Options Indexes FollowSymLinks Includes MultiViews
AllowOverride None
Require all granted
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>
Alias /xcat-doc "/opt/xcat/share/doc"
<Directory "/opt/xcat/share/doc">
Options Indexes
AllowOverride None
Require all granted
Options -Indexes +FollowSymLinks
Header always append X-Frame-Options SAMEORIGIN
Header always append X-XSS-Protection "1; mode=block"
Header always append X-Content-Type-Options nosniff
Header always append Content-Security-Policy "script-src 'self' 'unsafe-eval'"
Header always append X-Permitted-Cross-Domain-Policies none
</Directory>