The ScoreBoard file must be properly secured.
An XCCDF Rule
Description
The ScoreBoardFile directive sets a file path which the server will use for Inter-Process Communication (IPC) among the Apache processes. If the directive is specified, then Apache will use the configured file for the inter-process communication. Therefore if it is specified it needs to be located in a secure directory. If the ScoreBoard file is placed in openly writable directory, other accounts could create a denial of service attack and prevent the server from starting by creating a file with the same name, and or users could monitor and disrupt the communication between the processes by reading and writing to the file.
Property | Value |
---|---|
Responsibility | Web Administrator |
- ID
- SV-33178r2_rule
- Version
- WA00535 W22
- Severity
- Medium
- Updated
Remediation Templates
A Manual Procedure
Modify the location and/or permissions for the ScoreBoard file and/or folder.