Ensure NGINX is installed

MediaNivel 1Automatizadanginx

Descripción

An NGINX installation must be present on the system. To ensure support for modern security standards (such as TLS 1.3 and HTTP/3) and to mitigate known vulnerabilities, the installed version must be 1.28.0 or later and compiled with the necessary modules. Compliant when nginx -v reports version 1.28.0 or later. Evaluated on the merged configuration printed by `nginx -T` (all included files; needs permission to read them). CIS marks this recommendation Manual; the automated check implements its audit procedure.

Cómo se verifica

Método de auditoría: Comando de shell

shell

v=$(nginx -v 2>&1) || exit 1; v=$(printf '%s\n' "$v" | sed -n 's#.*nginx/\([0-9][0-9.]*\).*#\1#p' | head -n1); [ -n "$v" ] || exit 1; [ "$(printf '%s\n%s\n' 1.28.0 "$v" | sort -t. -k1,1n -k2,2n -k3,3n | head -n1)" = 1.28.0 ] && echo compliant || echo noncompliant

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Install or upgrade NGINX to 1.28.0 or later, preferably from the official nginx.org repositories.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: nginxinstallation
Referencia: CIS NGINX Benchmark v3.0.0 - 1.1.1 Ensure NGINX is installed

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target nginx