The account used to run the Apache web server must not have a valid login shell and password defined.| ID: oval:org.secpod.oval:def:73157 | Date: (C)2021-06-08 (M)2023-07-04 |
| Class: COMPLIANCE | Family: unix |
During installation of the Apache web server software, accounts are created for the Apache web server to operate properly. The accounts installed can have either no password installed or a default password, which will be known and documented by the vendor and the user community.
| Product: |
| Apache HTTP Server 2.4 |
