Detections
Analytics

OH12-1X-000199 - OHS must have the ServerAdmin directive set properly.

Information

Making sure that information is given to the system administrator in a timely fashion is important. This information can be system status, warnings that may need attention before system failure or actual failure notification. Having this information sent to the system administrator when the issue arises allows for the system administrator to quickly take action and avoid potential DoS for customers.

Solution

1. Open $DOMAIN_HOME/config/fmwconfig/components/OHS/<componentName>/httpd.conf and every .conf file (e.g., ssl.conf) included in it with an editor.

2. Search for the 'ServerAdmin' directive at the virtual host and directory configuration scopes.

3. Set the 'ServerAdmin' directive to an appropriate service-based email address for the organization, add the directive if it does not exist.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_HTTP_Server_12-1-3_V2R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-221437r961863_rule, STIG-ID|OH12-1X-000199, STIG-Legacy|SV-79127, STIG-Legacy|V-64637, Vuln-ID|V-221437

Plugin: Unix

Control ID: bfd83692c3d00b760a4483589fce9999c3c31283cf7e6f1695a61f97c93452d5