Ensure the Pid File Is Secured

Trung bìnhCấp 1Xem xét thủ côngapache

Mô tả

The PidFile directive sets the file path to the process ID file to which the server records the process id of the server, which is useful for sending a signal to the server process or for checking on the health of the process. Manual review: the benchmark gives no reliable automated check for this control.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

1. Find the directory in which the PidFile would be created. The default value is the ServerRoot/logs directory. 2. Verify that the process ID file directory is not a directory within the Apache DocumentRoot 3. Verify that the ownership and group of the directory is root:root (or the user under which Apache initially starts up if not root). 4. Verify the permissions on the directory are only writable by root (or the startup user if not root).

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

1. Find the directory in which the PidFile would be created. The default value is the ServerRoot/logs directory. 2. Modify the directory if the PidFile is in a directory within the Apache `DocumentRoot'. 3. Change the ownership and group to be root:root, if not already. 4. Change the permissions so that the directory is only writable by root, or the user under which Apache initially starts up (default is root).

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: apacheaccounts
Tham chiếu: CIS Apache HTTP Server 2.4 Benchmark v2.4.0 - 3.9 Ensure the Pid File Is Secured