II - Mission Support Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000141-WSR-000077
Group -
OHS must have the AliasMatch directive disabled for the OHS manuals.
Web server documentation, sample code, example applications, and tutorials may be an exploitable threat to a web server because this type of code has not been evaluated and approved. A production w...Rule Medium Severity -
SRG-APP-000141-WSR-000081
Group -
OHS must have the AddHandler directive disabled.
Controlling what a user of a hosted application can access is part of the security posture of the web server. Any time a user can access more functionality than is needed for the operation of the h...Rule Medium Severity -
SRG-APP-000141-WSR-000082
Group -
OHS must have the LoadModule cgi_module directive disabled.
Scripts allow server side processing on behalf of the hosted application user or as processes needed in the implementation of hosted applications. Removing scripts not needed for application operat...Rule Medium Severity -
SRG-APP-000141-WSR-000082
Group -
OHS must have the LoadModule cgid_module directive disabled.
Scripts allow server side processing on behalf of the hosted application user or as processes needed in the implementation of hosted applications. Removing scripts not needed for application operat...Rule Medium Severity -
SRG-APP-000141-WSR-000082
Group -
OHS must have the IfModule cgid_module directive disabled for the OHS server, virtual host, and directory configuration.
Scripts allow server side processing on behalf of the hosted application user or as processes needed in the implementation of hosted applications. Removing scripts not needed for application operat...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.