Ensure Access to OS Root Directory Is Denied By Default
Details The Apache Directory directive allows for directory specific configuration of access controls and many other features and options. One...
- Home
- Security Hardening
- CIS Apache HTTP Server 2.4 L1 V2.0.0
CIS Apache HTTP Server 2.4 L1 V2.0.0
Ensure Access to OS Root Directory Is Denied By Default – ‘httpd.conf Require all denied’
Details The Apache Directory directive allows for directory specific configuration of access controls and many other features and options. One...Ensure Apache Directories and Files Are Owned By Root
Details The Apache directories and files should be owned by root. This applies to all of the Apache software directories...Ensure Appropriate Access to Web Content Is Allowed
Details In order to serve Web content, either the Apache Allow directive or the Require directive will need to be...Ensure Default HTML Content Is Removed – ‘httpd-manual is not installed’
Details Apache installations have default content that is not needed or appropriate for production use. The primary function for this...Ensure Default HTML Content Is Removed – ‘other handler does not exist’
Details Apache installations have default content that is not needed or appropriate for production use. The primary function for this...Ensure Default HTML Content Is Removed – ‘Server Information handler does not exist’
Details Apache installations have default content that is not needed or appropriate for production use. The primary function for this...Ensure Default HTML Content Is Removed – ‘Server Status handler does not exist’
Details Apache installations have default content that is not needed or appropriate for production use. The primary function for this...Ensure Group Write Access for the Apache Directories and Files Is Properly Restricted
Details Group permissions on Apache directories should generally be r-x and file permissions should be similar except not executable if...Ensure Only Necessary Authentication and Authorization Modules Are Enabled
Details The Apache 2.4 modules for authentication and authorization are grouped and named to provide both granularity and a consistent...