Ensure the Autoindex Module Is Disabled
Details The Apache ‘mod_autoindex’ module automatically generates a web page listing the contents of directories on the server, typically used...
- Home
- Security Hardening
- CIS Apache HTTP Server 2.2 L2 V3 6.0
CIS Apache HTTP Server 2.2 L2 V3 6.0
Ensure the Basic and Digest Authentication Modules are Disabled – auth_basic_module
Details The Apache ‘mod_auth_basic’ and ‘mod_auth_digest’ modules support HTTP Basic Authentication and HTTP Digest Authentication respectively. The two authentication protocols...Ensure the Basic and Digest Authentication Modules are Disabled – auth_digest_module
Details The Apache ‘mod_auth_basic’ and ‘mod_auth_digest’ modules support HTTP Basic Authentication and HTTP Digest Authentication respectively. The two authentication protocols...Ensure the Core Dump Directory Is Secured
Details The ‘CoreDumpDirectory’ directive can be used to specify a directory which Apache attempts to switch before dumping core for...Ensure the Info Module Is Disabled
Details The Apache ‘mod_info’ module provides information on the server configuration via access to a ‘/server-info’ URL location. Rationale: Although...Ensure the Lock File Is Secured – ‘LockFile directory’
Details The ‘LockFile’ directive sets the path to the lock file used when Apache uses ‘fcntl(2)’ or ‘flock(2)’ system calls...Ensure the Lock File Is Secured – ‘LockFile permissions’
Details The ‘LockFile’ directive sets the path to the lock file used when Apache uses ‘fcntl(2)’ or ‘flock(2)’ system calls...Ensure the Log Config Module Is Enabled
Details The ‘log_config’ module provides for flexible logging of client requests and for the configuration of the information in each...Ensure the Pid File Is Secured
Details The ‘PidFile’ directive sets the file path to the process ID (pid) file to which the server records the...Ensure the Pre-Installation Planning Checklist Has Been Implemented
Details Review and implement the following items as appropriate: – Review and implement your organization’s security policies as they relate...