3.18 Only enable Web server if absolutely necessary - Ensure file /etc/rc3.d/S50apache does NOT exist.


This item only applies to Solaris 8 and later systems. Even if this machine is a web server, the local site may choose not to use the web server provided with Solaris in favor of a locally developed and supported Web environment. If the machine is a web server, the administrator is encouraged to search the Web for additional documentation on web server security. A good starting point is http://httpd.apache.org/docs-2.0/misc/security_tips.html.

See Also


Item Details

Audit Name: CIS Solaris 9 v1.3


References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: 52cbaaa7869062aba4f77523d444588d4618175eefa8aa783f65a9cc97153d8b