Home
Security Hardening
DISA STIG Apache Site 2.2 Unix V1R11 Middleware

DISA STIG Apache Site 2.2 Unix V1R11 Middleware

WG290 A22 – Web client access to the content directories must be restricted to read and execute – script alias match
Details Excessive permissions for the anonymous web user account are one of the most common faults contributing to the compromise...
WG310 A22 – A web site must not contain a robots.txt file
Details Search engines are constantly at work on the Internet. Search engines are augmented by agents, often referred to as...
WG340 A22 – A private web server must utilize an approved TLS version – SSLEngine
Details Transport Layer Security (TLS) encryption is a required security setting for a private web server. Encryption of private information...
WG340 A22 – A private web server must utilize an approved TLS version – SSLProtocol
Details Transport Layer Security (TLS) encryption is a required security setting for a private web server. Encryption of private information...
WG342 A22 – Public web servers must use TLS if authentication is required.
Details Transport Layer Security (TLS) is optional for a public web server. However, if authentication is being performed, then the...
WG350 A22 – A private web server will have a valid DoD server certificate.
Details This check verifies that DoD is a hosted web site’s CA. The certificate is actually a DoD-issued server certificate...
WG490 A22 – Java software on production web servers must be limited to class files and the JAVA virtual machine – cgi-bin
Details From the source code in a .java or a .jpp file, the Java compiler produces a binary file with...
WG490 A22 – Java software on production web servers must be limited to class files and the JAVA virtual machine – html
Details From the source code in a .java or a .jpp file, the Java compiler produces a binary file with...
WG360 A22 – Symbolic links must not be used in the web content directory tree – conf
Details A symbolic link allows a file or a directory to be referenced using a symbolic name raising a potential...
WG360 A22 – Symbolic links must not be used in the web content directory tree – find
Details A symbolic link allows a file or a directory to be referenced using a symbolic name raising a potential...

Prev Next

DISA STIG Apache Site 2.2 Unix V1R11 Middleware

WG290 A22 – Web client access to the content directories must be restricted to read and execute – script alias match

WG310 A22 – A web site must not contain a robots.txt file

WG340 A22 – A private web server must utilize an approved TLS version – SSLEngine

WG340 A22 – A private web server must utilize an approved TLS version – SSLProtocol

WG342 A22 – Public web servers must use TLS if authentication is required.

WG350 A22 – A private web server will have a valid DoD server certificate.

WG490 A22 – Java software on production web servers must be limited to class files and the JAVA virtual machine – cgi-bin

WG490 A22 – Java software on production web servers must be limited to class files and the JAVA virtual machine – html

WG360 A22 – Symbolic links must not be used in the web content directory tree – conf

WG360 A22 – Symbolic links must not be used in the web content directory tree – find