Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • WA000-WWA024

    <GroupDescription></GroupDescription>
    Group
  • The KeepAliveTimeout directive must be defined.

    &lt;VulnDiscussion&gt;The number of seconds Apache will wait for a subsequent request before closing the connection. Once a request has been receiv...
    Rule Medium Severity
  • WA000-WWA050

    <GroupDescription></GroupDescription>
    Group
  • All interactive programs must be placed in a designated directory with appropriate permissions.

    &lt;VulnDiscussion&gt;CGI scripts are one of the most exploited vulnerabilities on web servers. CGI script execution in Apache can be accomplished...
    Rule Medium Severity
  • WA000-WWA052

    <GroupDescription></GroupDescription>
    Group
  • The FollowSymLinks setting must be disabled.

    &lt;VulnDiscussion&gt;The Options directive configures the web server features that are available in particular directories. The FollowSymLinks opt...
    Rule Medium Severity
  • WA000-WWA054

    <GroupDescription></GroupDescription>
    Group
  • Server side includes (SSIs) must run with execution capability disabled.

    &lt;VulnDiscussion&gt;The Options directive configures the web server features that are available in particular directories. The IncludesNOEXEC fe...
    Rule High Severity
  • WA000-WWA056

    <GroupDescription></GroupDescription>
    Group
  • The MultiViews directive must be disabled.

    &lt;VulnDiscussion&gt;Apache HTTPD supports content negotiation as described in the HTTP/1.1 specification. It can choose the best representation o...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules