The Apache web server htpasswd files (if present) must reflect proper ownership and permissions.| ID: oval:org.secpod.oval:def:73158 | Date: (C)2021-06-08 (M)2023-07-04 |
| Class: COMPLIANCE | Family: unix |
In addition to OS restrictions, access rights to files and directories can be set on a website using the web server software. That is, in addition to allowing or denying all access rights, a rule can be specified that allows or denies partial access rights. For example, users can be given read-only access rights to files to view the information but not change the files.
| Product: |
| Apache HTTP Server 2.4 |
