Ensure Only Necessary Authentication and Authorization Modules Are Enabled

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

1. Use the httpd -M option as root to check which auth*modules are loaded. # httpd -M | egrep 'auth._' 2. Also use the httpd -M option as root to check for any LDAP modules which don't follow the same naming convention. # httpd -M | egrep 'ldap' The above commands should generate a Syntax OK message to stderr, in addition to a list of modules installed to stdout. If the Syntax OK message is missing, then there was most likely an error in parsing the configuration files.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Consult Apache module documentation for descriptions of each module in order to determine the necessary modules for the specific installation. https://httpd.apache.org/docs/2.4/mod/ The unnecessary static compiled modules are disabled through compile time configuration options as documented in https://httpd.apache.org/docs/2.4/programs/configure.html. The dynamically loaded modules are disabled by commenting out or removing the LoadModule directive from the Apache configuration files (typically httpd.conf). Some modules may be separate packages, and may be removed.