Ensure NGINX is installed

OrtaDüzey 1Otomatiknginx

Açıklama

An NGINX installation must be present on the system. To ensure support for modern security standards (such as TLS 1.3 and HTTP/3) and to mitigate known vulnerabilities, the installed version must be 1.28.0 or later and compiled with the necessary modules. Compliant when nginx -v reports version 1.28.0 or later. Evaluated on the merged configuration printed by `nginx -T` (all included files; needs permission to read them). CIS marks this recommendation Manual; the automated check implements its audit procedure.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

v=$(nginx -v 2>&1) || exit 1; v=$(printf '%s\n' "$v" | sed -n 's#.*nginx/\([0-9][0-9.]*\).*#\1#p' | head -n1); [ -n "$v" ] || exit 1; [ "$(printf '%s\n%s\n' 1.28.0 "$v" | sort -t. -k1,1n -k2,2n -k3,3n | head -n1)" = 1.28.0 ] && echo compliant || echo noncompliant

Beklenen çıktı: compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Install or upgrade NGINX to 1.28.0 or later, preferably from the official nginx.org repositories.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: nginxinstallation
Referans: CIS NGINX Benchmark v3.0.0 - 1.1.1 Ensure NGINX is installed

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target nginx