Ensure Only the Necessary SELinux Booleans are Enabled
Details SELinux booleans allow or disallow behavior specific to the Apache web server. Common examples include whether CGI execution is...
- Home
- Security Hardening
- CIS Apache HTTP Server 2.4 L2 V2.0.0
CIS Apache HTTP Server 2.4 L2 V2.0.0
Ensure SELinux Is Enabled in Enforcing Mode – config
Details SELinux (Security-Enhanced Linux) is a Linux kernel security module that provides mandatory access control security policies with type enforcement...Ensure SELinux Is Enabled in Enforcing Mode – current
Details SELinux (Security-Enhanced Linux) is a Linux kernel security module that provides mandatory access control security policies with type enforcement...Ensure the Apache AppArmor Profile Is Configured Properly
Details AppArmor includes customizable profiles that may be used to confine the Apache web server to enforce least privileges so...Ensure the AppArmor Framework Is Enabled
Details AppArmor is a Linux kernel security module that provides a named based mandatory access control with security policies. AppArmor...Ensure the httpd_t Type is Not in Permissive Mode
Details In addition to setting the entire SELinux configuration in permissive mode, it is possible to set individual process types...Ensure the IP Addresses for Listening for Requests Are Specified – ‘httpd.conf Listen 0.0.0.0:80 does not exists’
Details The Apache Listen directive specifies the IP addresses and port numbers the Apache web server will listen for requests....Ensure the IP Addresses for Listening for Requests Are Specified – ‘httpd.conf Listen [::ffff:0.0.0.0]:80 does not exists’
Details The Apache Listen directive specifies the IP addresses and port numbers the Apache web server will listen for requests....Ensure the LimitRequestLine directive is Set to 512 or less
Details Buffer Overflow attacks attempt to exploit an application by providing more data than the application buffer can contain. If...Ensure the LimitRequestBody Directive is Set to 102400 or Less
Details The LimitRequestBody directive limits the number of bytes that are allowed in a request body. Size of requests may...