Ensure NGINX directories and files are owned by root

TinggiLevel 1Otomatisnginx

Deskripsi

The NGINX configuration directory and all contained files must be owned by the root user and group to prevent unauthorized modification. Counts files and directories under /etc/nginx not owned by root:root; expects 0. Evaluated on the merged configuration printed by `nginx -T` (all included files; needs permission to read them). CIS marks this recommendation Manual; the automated check implements its audit procedure.

Cara pemeriksaan

Metode audit: Perintah shell

shell

[ -d /etc/nginx ] || exit 1; find /etc/nginx \( ! -user root -o ! -group root \) -print 2>/dev/null | wc -l

Output yang diharapkan: 0

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

chown -R root:root /etc/nginx

Properti

Sistem operasi: Apa saja
Tag: nginxpermissions
Referensi: CIS NGINX Benchmark v3.0.0 - 2.3.1 Ensure NGINX directories and files are owned by root

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target nginx