Red Hat ENTERPRISE LINUX 5 - DEPLOYMENT Deployment Manual page 369

ServerName www.example.com:80
When specifying a ServerName, be sure the IP address and server name pair are included in the /
etc/hosts file.
ServerRoot
The ServerRoot directive specifies the top-level directory containing website content. By default,
ServerRoot is set to "/etc/httpd" for both secure and non-secure servers.
ServerSignature
The ServerSignature directive adds a line containing the Apache HTTP Server server version and
the ServerName to any server-generated documents, such as error messages sent back to clients.
ServerSignature is set to on by default.
ServerSignature can be set to EMail which adds a mailto:ServerAdmin HTML tag to
the signature line of auto-generated responses. ServerSignature can also be set to Off to
stop Apache from sending out its version number and module information. Please also check the
ServerTokens settings.
ServerTokens
The ServerTokens directive determines if the Server response header field sent back to clients
should include details of the Operating System type and information about compiled-in modules.
By default, ServerTokens is set to Full which sends information about the Operating System
type and compiled-in modules. Setting the ServerTokens to Prod sends the product name only
and is recommended as many hackers check information in the Server header when scanning for
vulnerabilities. You can also set the ServerTokens to Min (minimal) or to OS (operating system).
SuexecUserGroup
The SuexecUserGroup directive, which originates from the mod_suexec module, allows the
specification of user and group execution privileges for CGI programs. Non-CGI requests are still
processed with the user and group specified in the User and Group directives.
Note
From version 2.0, the SuexecUserGroup directive replaced the Apache HTTP Server
1.3 configuration of using the User and Group directives inside the configuration of
VirtualHosts sections.
Timeout
Timeout defines, in seconds, the amount of time that the server waits for receipts and transmissions
during communications. Timeout is set to 300 seconds by default, which is appropriate for most
situations.
General Configuration Tips
343