Ensure Access to OS Root Directory Is Denied By Default – ‘httpd.conf Deny = from all
Details The Apache ‘Directory’ directive allows for directory-specific configuration of access controls and many other features and options. One important...
- Home
- Security Hardening
- CIS Apache HTTP Server 2.2 L2 V3 6.0
CIS Apache HTTP Server 2.2 L2 V3 6.0
Ensure Access to OS Root Directory Is Denied By Default – ‘httpd.conf no Allow directives exist’
Details The Apache ‘Directory’ directive allows for directory-specific configuration of access controls and many other features and options. One important...Ensure Access to OS Root Directory Is Denied By Default – ‘httpd.conf no Deny directives exist’
Details The Apache ‘Directory’ directive allows for directory-specific configuration of access controls and many other features and options. One important...Ensure Access to OS Root Directory Is Denied By Default – ‘httpd.conf no Require directives exist’
Details The Apache ‘Directory’ directive allows for directory-specific configuration of access controls and many other features and options. One important...Ensure Access to OS Root Directory Is Denied By Default – ‘httpd.conf Order = Deny,Allow
Details The Apache ‘Directory’ directive allows for directory-specific configuration of access controls and many other features and options. One important...Ensure Access to OS Root Directory Is Denied By Default – ‘httpd.conf Require all denied
Details The Apache ‘Directory’ directive allows for directory-specific configuration of access controls and many other features and options. One important...Ensure Access to Special Purpose Application Writable Directories is Properly Restricted
Details When the Apache webserver includes application software such as PHP, Java and many others, it is common for the...Ensure Apache Directories and Files Are Owned By Root
Details The Apache directories and files should be owned by root. This applies to all of the Apache software directories...Ensure Apache Is Installed From the Appropriate Binaries
Details The CIS Apache Benchmark recommends using the Apache binary provided by your vendor for most situations in order to...Ensure Appropriate Access to Web Content Is Allowed – ‘httpd.conf Allow is configured’
Details In order to serve web content, the Apache ‘Allow’ directive will need to be used to allow for appropriate...