AS24-U2-000590 - The Apache web server must be tuned to handle the operational requirements of the hosted application.
A denial of service (DoS) can occur when the Apache web server is so overwhelmed that it can no longer respond to additional requests. A web server not properly tuned may become overwhelmed and cause a DoS condition even with expected traffic from users. To avoid a DoS, the Apache web server must be tuned to handle the expected traffic for the hosted applications. Satisfies: SRG-APP-000246-WSR-000149, SRG-APP-000435-WSR-000148
Determine the location of the 'HTTPD_ROOT' directory and the 'httpd.conf' file: # httpd -V | egrep -i 'httpd_root|server_config_file' -D HTTPD_ROOT='/etc/httpd' -D SERVER_CONFIG_FILE='conf/httpd.conf' Add or modify the 'Timeout' directive in the Apache configuration to have a value of '10' seconds or less. 'Timeout 10'