Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • The Apache web server must produce log records containing sufficient information to establish what type of events occurred.

    Apache web server logging capability is critical for accurate forensic analysis. Without sufficient and accurate information, a correct replay of the events cannot be determined. Ascertaining th...
    Rule Medium Severity
  • SRG-APP-000141-WSR-000015

    Group
  • The Apache web server must not perform user management for hosted applications.

    User management and authentication can be an essential part of any application hosted by the web server. Along with authenticating users, the user management function must perform several other tas...
    Rule Medium Severity
  • SRG-APP-000141-WSR-000081

    Group
  • The Apache web server must have Multipurpose Internet Mail Extensions (MIME) that invoke operating system shell programs disabled.

    Controlling what a user of a hosted application can access is part of the security posture of the web server. Any time a user can access more functionality than is needed for the operation of the h...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules