Ensure NGINX is installed from source

Details

Installing NGINX directly from source allows you to install NGINX without the use of a package manager.

Rationale:

Installing NGINX from source allows you to harden your instance of NGINX by minimizing modules. NGINX is unable to remove modules when installed using a package manager. By installing from source, you are able to minimize modules, however, some additional configuration will be required and updates will not be automated out of the box for you.

Solution

Installation depends on the operating system platform. For a source build, consult the NGINX documentation [‘Building nginx from Sources’](https://docs.nginx.com/nginx/admin-guide/installing-nginx/installing-nginx-open-source/).

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles