Ensure NGINX is installed

MoyenneNiveau 1Automatiséenginx

Description

An NGINX installation must be present on the system. To ensure support for modern security standards (such as TLS 1.3 and HTTP/3) and to mitigate known vulnerabilities, the installed version must be 1.28.0 or later and compiled with the necessary modules. Compliant when nginx -v reports version 1.28.0 or later. Evaluated on the merged configuration printed by `nginx -T` (all included files; needs permission to read them). CIS marks this recommendation Manual; the automated check implements its audit procedure.

Méthode de vérification

Méthode d'audit: Commande shell

shell

v=$(nginx -v 2>&1) || exit 1; v=$(printf '%s\n' "$v" | sed -n 's#.*nginx/\([0-9][0-9.]*\).*#\1#p' | head -n1); [ -n "$v" ] || exit 1; [ "$(printf '%s\n%s\n' 1.28.0 "$v" | sort -t. -k1,1n -k2,2n -k3,3n | head -n1)" = 1.28.0 ] && echo compliant || echo noncompliant

Sortie attendue: compliant

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Install or upgrade NGINX to 1.28.0 or later, preferably from the official nginx.org repositories.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: nginxinstallation
Référence: CIS NGINX Benchmark v3.0.0 - 1.1.1 Ensure NGINX is installed

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target nginx