CyberStrikeus/CyberStrike - Page 186

cis-apache-3-1

Ensure the Apache Web Server Runs As a Non-Root User

cis-apache-3-10

Ensure the ScoreBoard File Is Secured

cis-apache-3-11

Ensure Group Write Access for the Apache Directories and Files Is Properly Restricted

cis-apache-3-12

Ensure Group Write Access for the Document Root Directories and Files Is Properly Restricted

cis-apache-3-13

Ensure Access to Special Purpose Application Writable Directories is Properly Restricted

cis-apache-3-2

Ensure the Apache User Account Has an Invalid Shell

cis-apache-3-3

Ensure the Apache User Account Is Locked

cis-apache-3-4

Ensure Apache Directories and Files Are Owned By Root

cis-apache-3-5

Ensure the Group Is Set Correctly on Apache Directories and Files

cis-apache-3-6

Ensure Other Write Access on Apache Directories and Files Is Restricted

cis-apache-3-7

Ensure the Core Dump Directory Is Secured

cis-apache-3-8

Ensure the Lock File Is Secured

cis-apache-3-9

Ensure the Pid File Is Secured

cis-apache-4-1

Ensure Access to OS Root Directory Is Denied By Default

cis-apache-4-2

Ensure Appropriate Access to Web Content Is Allowed

cis-apache-4-3

Ensure OverRide Is Disabled for the OS Root Directory

cis-apache-4-4

Ensure OverRide Is Disabled for All Directories

cis-apache-5-1

Ensure Options for the OS Root Directory Are Restricted

cis-apache-5-11

Ensure Access to Inappropriate File Extensions Is Restricted

cis-apache-5-12

Ensure IP Address Based Requests Are Disallowed

cis-apache-5-13

Ensure the IP Addresses for Listening for Requests Are Specified

cis-apache-5-14

Ensure Browser Framing Is Restricted

cis-apache-5-2

Ensure Options for the Web Root Directory Are Restricted

cis-apache-5-3

Ensure Options for Other Directories Are Minimized

cis-apache-5-5

Ensure the Default CGI Content printenv Script Is Removed

cis-apache-5-6

Ensure the Default CGI Content test-cgi Script Is Removed

cis-apache-5-7

Ensure HTTP Request Methods Are Restricted

cis-apache-5-8

Ensure the HTTP TRACE Method Is Disabled

cis-apache-5-9

Ensure Old HTTP Protocol Versions Are Disallowed

cis-apache-6-1

Ensure the Error Log Filename and Severity Level Are Configured Correctly

cis-apache-6-2

Ensure a Syslog Facility Is Configured for Error Logging

cis-apache-6-3

Ensure the Server Access Log Is Configured Correctly

cis-apache-6-4

Ensure Log Storage and Rotation Is Configured Correctly

cis-apache-7-10

Ensure the TLSv1.0 and TLSv1.1 Protocols are Disabled

cis-apache-7-11

Ensure HTTP Strict Transport Security Is Enabled

cis-apache-7-7

Ensure SSL Compression is Not Enabled

cis-apache-7-8

Ensure Medium Strength SSL/TLS Ciphers Are Disabled

cis-apache-7-9

Ensure All Web Content is Accessed via HTTPS

cis-apache-8-1

Ensure ServerTokens is Set to 'Prod' or 'ProductOnly'

cis-apache-8-2

Ensure ServerSignature Is Not Enabled