More secure default settings - apache, php, ftp [Various Cases]

[forlinuxsupport]

Can we have the default settings for Apache, PHP and FTP set more securely.

Apache
TraceEnable = OFF
ServerSignature = OFF
ServerTokens = ProductOnly
Directory '/' Options = disable INDEXES

PHP
expose_php = OFF


FTP
Allow Anonymous Logins = OFF
Allow Anonymous Uploads = OFF
Allow Logins with Root Password = OFF

[forlinuxsupport]

Please make Pure-FTP more secure when cPanel is first installed :

Allow Anonymous Logins          NO
Allow Anonymous Uploads         NO
Allow Logins with Root Password NO

These values make it more secure.

[Kent Brockman]

I recently buy a VPS with cPanel and this options enabled by default looked like a nonsense.
So yes, +1 for this

[asturmas]

Agree with this change!

[cPanelDavidG]

Can we have the default settings for Apache, PHP and FTP set more securely.

Apache
TraceEnable = OFF
ServerSignature = OFF
ServerTokens = ProductOnly
Directory '/' Options = disable INDEXES

PHP
expose_php = OFF

For those interested, the above are being handled as part of Case 56044

FTP
Allow Anonymous Logins = OFF
Allow Anonymous Uploads = OFF
Allow Logins with Root Password = OFF

EDIT: These are being handled via Case 58962

[cPanelDavidG]

I am going to merge this with the OP's other thread on this topic as to reduce confusion when people search for this feature request.

[cPanelDavidG]

Just as a FYI: While we plan to change the FTP defaults, we will also be reworking cPanel to resolve some known issues with the Anonymous FTP GUI (e.g. in some circumstances it may permit a user to seem to allow Anonymous FTP even if it has been disabled server-wide).

[LaceHost-Ishan]

It would be good to include all of CSF's security checklist so that admins don't need to waste 30 minutes after cPanel installation to change the defaults.

[eva2000]

+1 for this, anything to save time after all time is $$$

[sardelich]

CSF would be a good starting point but there are some warnings in CSF that might break things, epecially php if set up the way CSF likes it to