WA00545 A22 – Web server options for the OS root must be disabled.
Details The Apache Options directive allows for specific configuration of options, including execution of CGI, following symbolic links, server side...
- Home
- Security Hardening
- DISA STIG Apache Server 2.2 Unix V1R11
DISA STIG Apache Server 2.2 Unix V1R11
WA00547 A22 – The ability to override the access configuration for the OS root directory must be disabled.
Details The Apache OverRide directive allows for .htaccess files to be used to override much of the configuration, including authentication,...WA00550 A22 – The TRACE method must be disabled.
Details Diagnostics help establish a history of activities, and can be useful in detecting attack attempts or determining tuning adjustments...WA00555 A22 – The web server must be configured to listen on a specific IP address and port – 0.0.0.0:80
Details The Apache Listen directive specifies the IP addresses and port numbers the Apache web server will listen for requests....WA00555 A22 – The web server must be configured to listen on a specific IP address and port – 80
Details The Apache Listen directive specifies the IP addresses and port numbers the Apache web server will listen for requests....WA00535 A22 – The score board file must be properly secured.
Details The ScoreBoardfile directive sets a file path which the server will use for Inter-Process Communication (IPC) among the Apache...WA00540 A22 – The web server must be configured to explicitly deny access to the OS root – Deny
Details The Apache Directory directive allows for directory specific configuration of access controls and many other features and options. One...WA00555 A22 – The web server must be configured to listen on a specific IP address and port – [::ffff:0.0.0.0]:80
Details The Apache Listen directive specifies the IP addresses and port numbers the Apache web server will listen for requests....WA00555 A22 – The web server must be configured to listen on a specific IP address and port – listen
Details The Apache Listen directive specifies the IP addresses and port numbers the Apache web server will listen for requests....WA00560 A22 – The URL-path name must be set to the file path name or the directory path name.
Details The ScriptAlias directive controls which directories the Apache server ‘sees’ as containing scripts. If the directive uses a URL-path...