Apache_Hardening_Centos

#!/bin/bash

PathPHP="/etc/php.d/security.ini"


# PHP

echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}
echo  "expose_php = off" >> ${PathPHP}

# HTTPD
PathHTTPd="/etc/httpd/cond.d/security.conf"
echo "ServerSignature Off" >>${PathHTTPd}
echo "ServerTokens Prod" >>${PathHTTPd}
echo "TraceEnable off" >>${PathHTTPd}
echo "FileETag None" >>${PathHTTPd}
echo "Header set X-Frame-Options SAMEORIGIN" >>${PathHTTPd}
echo "Header set X-XSS-Protection 1;mode=block" >>${PathHTTPd}
echo "Header set X-Content-Type-Options nosniff" >>${PathHTTPd}
#echo "X-Permitted-Cross-Domain-Policies: none" >>${PathHTTPd}
#echo "Referrer-Policy: no-referrer" >>${PathHTTPd}
echo "" >>${PathHTTPd}
echo "" >>${PathHTTPd}