UCF STIG Viewer Logo

The Apache web server must be tuned to handle the operational requirements of the hosted application.


Overview

Finding ID Version Rule ID IA Controls Severity
V-92697 AS24-U1-000590 SV-102785r1_rule Medium
Description
A denial of service (DoS) can occur when the Apache web server is so overwhelmed that it can no longer respond to additional requests. A web server not properly tuned may become overwhelmed and cause a DoS condition even with expected traffic from users. To avoid a DoS, the Apache web server must be tuned to handle the expected traffic for the hosted applications. Satisfies: SRG-APP-000246-WSR-000149, SRG-APP-000435-WSR-000148
STIG Date
Apache Server 2.4 UNIX Server Security Technical Implementation Guide 2019-05-23

Details

Check Text ( C-92001r2_chk )
Determine the location of the "HTTPD_ROOT" directory and the "httpd.conf" file:

# httpd -V | egrep -i 'httpd_root|server_config_file'
-D HTTPD_ROOT="/etc/httpd"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

Verify that the "Timeout" directive is specified to have a value of "10" seconds or less.

# cat //httpd.conf | grep -i "Timeout"

If the "Timeout" directive is not configured or is set for more than "10" seconds, this is a finding.
Fix Text (F-98939r1_fix)
Determine the location of the "HTTPD_ROOT" directory and the "httpd.conf" file:

# httpd -V | egrep -i 'httpd_root|server_config_file'
-D HTTPD_ROOT="/etc/httpd"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

Add or modify the "Timeout" directive to have a value of "10" seconds or less:

"Timeout 10"