The web server password(s) must be entrusted to the SA or Web Manager
An XCCDF Rule
Description
Normally, a service account is established for the web server. This is because a privileged account is not desirable and the server is designed to run for long uninterrupted periods of time. The SA or Web Manager will need password access to the web server to restart the service in the event or an emergency as the web server is not to restart automatically after an unscheduled interruption.
Rationale
If the password is not entrusted to an SA or web manager the ability to ensure the availability of the web server is compromised.
- ID
- xccdf_org.ssgproject.content_rule_httpd_entrust_passwords
- Severity
- Medium
- References
- Updated