Ensure Group Write Access for the Apache Directories and Files Is Properly Restricted
Details Group permissions on Apache directories should generally be r-x and file permissions should be similar except not executable if...
- Home
- Security Hardening
- CIS Apache HTTP Server 2.4 L1 V2.0.0 Middleware
CIS Apache HTTP Server 2.4 L1 V2.0.0 Middleware
Ensure Group Write Access for the Document Root Directories and Files Is Properly Restricted
Details Group permissions on Apache Document Root directories $DOCROOT may need to be writable by an authorized group such as...Ensure HTTP Request Methods Are Restricted – allow
Details Use the Apache directive to restrict unnecessary HTTP request methods of the web server to only accept and process...Ensure HTTP Request Methods Are Restricted – deny
Details Use the Apache directive to restrict unnecessary HTTP request methods of the web server to only accept and process...Ensure Only Necessary Authentication and Authorization Modules Are Enabled
Details The Apache 2.4 modules for authentication and authorization are grouped and named to provide both granularity and a consistent...Ensure Options for Other Directories Are Minimized
Details The Apache Options directive allows for specific configuration of options, including execution of CGI, following symbolic links, server side...Ensure Options for the Web Root Directory Are Restricted
Details The Apache Options directive allows for specific configuration of options, including: Execution of CGI Following symbolic links Server side...Ensure Other Write Access on Apache Directories and Files Is Restricted
Details Permissions on Apache directories should generally be rwxr-xr-x (755) and file permissions should be similar except not executable unless...Ensure OverRide Is Disabled for All Directories – AllowOverride
Details The Apache AllowOverride directive and the new AllowOverrideList directive allow for .htaccess files to be used to override much...Ensure OverRide Is Disabled for the OS Root Directory – AllowOverride None
Details The Apache AllowOverRide directive and the new AllowOverrideList directive allow for .htaccess files to be used to override much...