Skip to content

The web server service password(s) must be entrusted to the SA or Web Manager.

An XCCDF Rule

Description

Normally, a service account is established for the web server. This is because a privileged account is not desirable and the server is designed to run for long uninterrupted periods of time. The SA or Web Manager will need password access to the web server to restart the service in the event of an emergency as the web server is not to restart automatically after an unscheduled interruption. If the password is not entrusted to an SA or web manager the ability to ensure the availability of the web server is compromised.

Property Value
Responsibility System Administrator

ID
SV-33048r1_rule
Version
WG050 W22
Severity
Medium
Updated

Remediation Templates

A Manual Procedure

Ensure the SA or Web Manager is entrusted with the web service(s) password.