TMA-NGINX-2.3.1

Ensure NGINX directories and files are owned by root

HochStufe 1Automatisiertnginx

Beschreibung

The NGINX configuration directory and all contained files must be owned by the root user and group to prevent unauthorized modification. Counts files and directories under /etc/nginx not owned by root:root; expects 0. Evaluated on the merged configuration printed by `nginx -T` (all included files; needs permission to read them). CIS marks this recommendation Manual; the automated check implements its audit procedure.

So wird geprüft

Prüfmethode: Shell-Befehl

shell

[ -d /etc/nginx ] || exit 1; find /etc/nginx \( ! -user root -o ! -group root \) -print 2>/dev/null | wc -l

Erwartete Ausgabe: 0

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

chown -R root:root /etc/nginx

Eigenschaften

Betriebssysteme: Beliebig
Tags: nginxpermissions
Referenz: CIS NGINX Benchmark v3.0.0 - 2.3.1 Ensure NGINX directories and files are owned by root

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target nginx