Skip to content

Apache Server 2.4 Windows Server Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Apache web server must not be a proxy server.

    <VulnDiscussion>A web server should be primarily a web server or a proxy server but not both, for the same reasons that other multi-use serve...
    Rule Medium Severity
  • SRG-APP-000141-WSR-000077

    <GroupDescription></GroupDescription>
    Group
  • The Apache web server must provide install options to exclude the installation of documentation, sample code, example applications, and tutorials.

    &lt;VulnDiscussion&gt;Web server documentation, sample code, example applications, and tutorials may be an exploitable threat to a web server becau...
    Rule High Severity
  • SRG-APP-000141-WSR-000078

    <GroupDescription></GroupDescription>
    Group
  • Apache web server application directories, libraries, and configuration files must only be accessible to privileged users.

    &lt;VulnDiscussion&gt;When accounts used for web server features such as documentation, sample code, example applications, tutorials, utilities, an...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules