[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255227

 
 

909

 
 

198741

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

The "-FollowSymLinks" setting must be disabled.

ID: oval:org.secpod.oval:def:73554Date: (C)2021-06-29   (M)2023-07-04
Class: COMPLIANCEFamily: unix




The Options directive configures the web server features that are available in particular directories. The FollowSymLinks option controls the ability of the server to follow symbolic links. A symbolic link allows a file or a directory to be referenced using a symbolic name raising a potential hazard if symbolic linkage is made to a sensitive area. When web scripts are executed and symbolic links are allowed, the web user could be allowed to access locations on the web server that are outside the scope of the web document root or home directory.

Platform:
Linux
Product:
Apache HTTP Server 2.2
Reference:
CCE-94595-6
CCE    1
CCE-94595-6
XCCDF    1
xccdf_org.secpod_benchmark_stig_apache_2.2_server

© SecPod Technologies