Ensure NGINX is installed

SrednjaNivo 1Automatskanginx

Opis

An NGINX installation must be present on the system. To ensure support for modern security standards (such as TLS 1.3 and HTTP/3) and to mitigate known vulnerabilities, the installed version must be 1.28.0 or later and compiled with the necessary modules. Compliant when nginx -v reports version 1.28.0 or later. Evaluated on the merged configuration printed by `nginx -T` (all included files; needs permission to read them). CIS marks this recommendation Manual; the automated check implements its audit procedure.

Kako se proverava

Metod provere: Komanda ljuske

shell

v=$(nginx -v 2>&1) || exit 1; v=$(printf '%s\n' "$v" | sed -n 's#.*nginx/\([0-9][0-9.]*\).*#\1#p' | head -n1); [ -n "$v" ] || exit 1; [ "$(printf '%s\n%s\n' 1.28.0 "$v" | sort -t. -k1,1n -k2,2n -k3,3n | head -n1)" = 1.28.0 ] && echo compliant || echo noncompliant

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Install or upgrade NGINX to 1.28.0 or later, preferably from the official nginx.org repositories.

Svojstva

Operativni sistemi: Bilo koji
Oznake: nginxinstallation
Referenca: CIS NGINX Benchmark v3.0.0 - 1.1.1 Ensure NGINX is installed

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target nginx