Home
Security Hardening
DISA STIG Apache Server 2.4 Unix Site V2R2 Middleware

DISA STIG Apache Server 2.4 Unix Site V2R2 Middleware

AS24-U2-000390 – Only authenticated system administrators or the designated PKI Sponsor for the Apache web server must have access to the Apache web servers private key.
Details The web server’s private key is used to prove the identity of the server to clients and securely exchange...
AS24-U2-000470 – Cookies exchanged between the Apache web server and client, such as session cookies, must have security settings that disallow cookie access outside the originating Apache web server and hosted application – Header HttpOnly Secure
Details Cookies are used to exchange data between the web server and the client. Cookies, such as a session cookie,...
AS24-U2-000470 – Cookies exchanged between the Apache web server and client, such as session cookies, must have security settings that disallow cookie access outside the originating Apache web server and hosted application – Javascript setCookie
Details Cookies are used to exchange data between the web server and the client. Cookies, such as a session cookie,...
AS24-U2-000320 – The Apache web server must have resource mappings set to disable the serving of certain file types.
Details Resource mapping is the process of tying a particular file type to a process in the web server that...
AS24-U2-000350 – Users and scripts running on behalf of users must be contained to the document root or home directory tree of the Apache web server – Allow directives
Details A web server is designed to deliver content and execute scripts or applications on the request of a client...
AS24-U2-000350 – Users and scripts running on behalf of users must be contained to the document root or home directory tree of the Apache web server – Deny directives
Details A web server is designed to deliver content and execute scripts or applications on the request of a client...
AS24-U2-000350 – Users and scripts running on behalf of users must be contained to the document root or home directory tree of the Apache web server – Require all denied
Details A web server is designed to deliver content and execute scripts or applications on the request of a client...
AS24-U2-000360 – The Apache web server must be configured to use a specified IP address and port.
Details The web server must be configured to listen on a specified IP address and port. Without specifying an IP...
AS24-U2-000380 – The Apache web server must perform RFC 5280-compliant certification path validation – SSLVerifyClient
Details A certificate’s certification path is the path from the end entity certificate to a trusted root certification authority (CA)....
AS24-U2-000540 – The Apache web server must augment re-creation to a stable and known baseline.
Details Making certain that the web server has not been updated by an unauthorized user is always a concern. Adding...

Prev Next

DISA STIG Apache Server 2.4 Unix Site V2R2 Middleware

AS24-U2-000390 – Only authenticated system administrators or the designated PKI Sponsor for the Apache web server must have access to the Apache web servers private key.

AS24-U2-000470 – Cookies exchanged between the Apache web server and client, such as session cookies, must have security settings that disallow cookie access outside the originating Apache web server and hosted application – Header HttpOnly Secure

AS24-U2-000470 – Cookies exchanged between the Apache web server and client, such as session cookies, must have security settings that disallow cookie access outside the originating Apache web server and hosted application – Javascript setCookie

AS24-U2-000320 – The Apache web server must have resource mappings set to disable the serving of certain file types.

AS24-U2-000350 – Users and scripts running on behalf of users must be contained to the document root or home directory tree of the Apache web server – Allow directives

AS24-U2-000350 – Users and scripts running on behalf of users must be contained to the document root or home directory tree of the Apache web server – Deny directives

AS24-U2-000350 – Users and scripts running on behalf of users must be contained to the document root or home directory tree of the Apache web server – Require all denied

AS24-U2-000360 – The Apache web server must be configured to use a specified IP address and port.

AS24-U2-000380 – The Apache web server must perform RFC 5280-compliant certification path validation – SSLVerifyClient

AS24-U2-000540 – The Apache web server must augment re-creation to a stable and known baseline.