Detections
Analytics

CIS Apache HTTP Server 2.4 L1 v2.1.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Apache HTTP Server 2.4 L1 v2.1.0

Updated: 2/10/2025

Authority: CIS

Plugin: Unix

Revision: 1.4

Estimated Item Count: 91

File Details

Filename: CIS_Apache_HTTP_Server_2.4_Benchmark_v2.1.0_Level_1.audit

Size: 255 kB

MD5: d1efd4358eeff370126b96bed7fa2052
SHA256: 839ca59c79ad5846d7a6e2e358a839b382810f7c84ae302870315dbbc3bf3422

Audit Items

DescriptionCategories
1.1 Ensure the Pre-Installation Planning Checklist Has Been Implemented
1.2 Ensure the Server Is Not a Multi-Use System
1.3 Ensure Apache Is Installed From the Appropriate Binaries
2.1 Ensure Only Necessary Authentication and Authorization Modules Are Enabled
2.2 Ensure the Log Config Module Is Enabled
2.3 Ensure the WebDAV Modules Are Disabled
2.4 Ensure the Status Module Is Disabled
2.5 Ensure the Autoindex Module Is Disabled
2.6 Ensure the Proxy Modules Are Disabled if not in use
2.7 Ensure the User Directories Module Is Disabled
2.8 Ensure the Info Module Is Disabled
2.9 Ensure the Basic and Digest Authentication Modules are Disabled - auth_basic_module
2.9 Ensure the Basic and Digest Authentication Modules are Disabled - auth_digest_module
3.1 Ensure the Apache Web Server Runs As a Non-Root User - 'apache account is configured'
3.1 Ensure the Apache Web Server Runs As a Non-Root User - 'httpd services are running as apache user'
3.1 Ensure the Apache Web Server Runs As a Non-Root User - 'httpd.conf Group = apache'
3.1 Ensure the Apache Web Server Runs As a Non-Root User - 'httpd.conf User = apache'
3.2 Ensure the Apache User Account Has an Invalid Shell
3.3 Ensure the Apache User Account Is Locked
3.4 Ensure Apache Directories and Files Are Owned By Root
3.5 Ensure the Group Is Set Correctly on Apache Directories and Files
3.6 Ensure Other Write Access on Apache Directories and Files Is Restricted
3.7 Ensure the Core Dump Directory Is Secured
3.8 Ensure the Lock File Is Secured - 'LockFile directory'
3.8 Ensure the Lock File Is Secured - 'LockFile on local hard drive'
3.8 Ensure the Lock File Is Secured - 'LockFile permissions'
3.9 Ensure the Pid File Is Secured - 'PidFile directory'
3.9 Ensure the Pid File Is Secured - 'PidFile permissions'
3.10 Ensure the ScoreBoard File Is Secured
3.11 Ensure Group Write Access for the Apache Directories and Files Is Properly Restricted
3.12 Ensure Group Write Access for the Document Root Directories and Files Is Properly Restricted
3.13 Ensure Access to Special Purpose Application Writable Directories is Properly Restricted
4.1 Ensure Access to OS Root Directory Is Denied By Default
4.1 Ensure Access to OS Root Directory Is Denied By Default - 'httpd.conf no Allow directives exist'
4.1 Ensure Access to OS Root Directory Is Denied By Default - 'httpd.conf Require all denied'
4.2 Ensure Appropriate Access to Web Content Is Allowed
4.3 Ensure OverRide Is Disabled for the OS Root Directory - AllowOverride None
4.3 Ensure OverRide Is Disabled for the OS Root Directory - exclude AllowOverrideList
4.4 Ensure OverRide Is Disabled for All Directories - AllowOverride
4.4 Ensure OverRide Is Disabled for All Directories - AllowOverrideList
5.1 Ensure Options for the OS Root Directory Are Restricted
5.2 Ensure Options for the Web Root Directory Are Restricted
5.3 Ensure Options for Other Directories Are Minimized
5.4 Ensure Default HTML Content Is Removed - 'httpd-manual is not installed'
5.4 Ensure Default HTML Content Is Removed - 'other handler does not exist'
5.4 Ensure Default HTML Content Is Removed - 'Server Information handler does not exist'
5.4 Ensure Default HTML Content Is Removed - 'Server Status handler does not exist'
5.5 Ensure the Default CGI Content printenv Script Is Removed
5.6 Ensure the Default CGI Content test-cgi Script Is Removed
5.7 Ensure HTTP Request Methods Are Restricted