CyberStrikeus/CyberStrike - Page 26

cis-apache24-3-3

Ensure the Apache User Account Is Locked

cis-apache24-3-4

Ensure Apache Directories and Files Are Owned By Root

cis-apache24-3-5

Ensure the Group Is Set Correctly on Apache Directories and Files

cis-apache24-3-6

Ensure Other Write Access on Apache Directories and Files Is Restricted

cis-apache24-3-7

Ensure the Core Dump Directory Is Secured

cis-apache24-3-8

Ensure the Lock File Is Secured

cis-apache24-3-9

Ensure the Pid File Is Secured

cis-apache24-4-1

Ensure Access to OS Root Directory Is Denied By Default

cis-apache24-4-2

Ensure Appropriate Access to Web Content Is Allowed

cis-apache24-4-3

Ensure OverRide Is Disabled for the OS Root Directory

cis-apache24-4-4

Ensure OverRide Is Disabled for All Directories

cis-apache24-5-1

Ensure Options for the OS Root Directory Are Restricted

cis-apache24-5-10

Ensure Access to .ht* Files Is Restricted

cis-apache24-5-11

Ensure Access to .git Files Is Restricted

cis-apache24-5-12

Ensure Access to .svn Files Is Restricted

cis-apache24-5-13

Ensure Access to Inappropriate File Extensions Is Restricted

cis-apache24-5-14

Ensure IP Address Based Requests Are Disallowed

cis-apache24-5-15

Ensure the IP Addresses for Listening for Requests Are Specified

cis-apache24-5-16

Ensure Browser Framing Is Restricted

cis-apache24-5-17

Ensure HTTP Header Referrer-Policy is set appropriately

cis-apache24-5-18

Ensure HTTP Header Permissions-Policy is set appropriately

cis-apache24-5-2

Ensure Options for the Web Root Directory Are Restricted

cis-apache24-5-3

Ensure Options for Other Directories Are Minimized

cis-apache24-5-4

Ensure Default HTML Content Is Removed

cis-apache24-5-5

Ensure the Default CGI Content printenv Script Is Removed

cis-apache24-5-6

Ensure the Default CGI Content test-cgi Script Is Removed

cis-apache24-5-7

Ensure HTTP Request Methods Are Restricted

cis-apache24-5-8

Ensure the HTTP TRACE Method Is Disabled

cis-apache24-5-9

Ensure Old HTTP Protocol Versions Are Disallowed

cis-apache24-6-1

Ensure the Error Log Filename and Severity Level Are Configured Correctly

cis-apache24-6-2

Ensure a Syslog Facility Is Configured for Error Logging

cis-apache24-6-4

Ensure Log Storage and Rotation Is Configured Correctly

cis-apache24-6-5

Ensure Applicable Patches Are Applied

cis-apache24-6-6

Ensure ModSecurity Is Installed and Enabled

cis-apache24-6-7

Ensure the OWASP ModSecurity Core Rule Set Is Installed and Enabled

cis-apache24-7-1

Ensure mod_ssl and/or mod_nss Is Installed

cis-apache24-7-10

Ensure OCSP Stapling Is Enabled (Manual)

cis-apache24-7-11

Ensure HTTP Strict Transport Security Is Enabled (Manual)

cis-apache24-7-12

Ensure Only Cipher Suites That Provide Forward Secrecy Are Enabled (Manual)

cis-apache24-7-2

Ensure a Valid Trusted Certificate Is Installed