Web content directories must not be anonymously shared.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-2226	WG210 A22	SV-33022r1_rule	ECCD-1 ECCD-2	Medium

Description
Sharing web content is a security risk when a web server is involved. Users accessing the share anonymously could experience privileged access to the content of such directories. Network sharable directories expose those directories and their contents to unnecessary access. Any unnecessary exposure increases the risk that someone could exploit that access and either compromises the web content or cause web server performance problems.

Description

Sharing web content is a security risk when a web server is involved. Users accessing the share anonymously could experience privileged access to the content of such directories. Network sharable directories expose those directories and their contents to unnecessary access. Any unnecessary exposure increases the risk that someone could exploit that access and either compromises the web content or cause web server performance problems.

STIG	Date
APACHE SITE 2.0 for Unix	2011-12-12

Details

Check Text ( C-33704r1_chk )
To view the DocumentRoot enter the following command: grep "DocumentRoot" /usr/local/apache2/conf/httpd.conf To view the ServerRoot enter the following command: grep "serverRoot" /usr/local/apache2/conf/httpd.conf Note the location following the DocumentRoot and ServerRoot directives. Enter the following commands to determine if file sharing is running: ps -ef \| grep nfs, ps -ef \| grep smb If results are returned, determine the shares and confirm they are not in the same directory as listed above, If they are, this is a finding.

Check Text ( C-33704r1_chk )

To view the DocumentRoot enter the following command:

grep "DocumentRoot" /usr/local/apache2/conf/httpd.conf

To view the ServerRoot enter the following command:

grep "serverRoot" /usr/local/apache2/conf/httpd.conf

Note the location following the DocumentRoot and ServerRoot directives.

Enter the following commands to determine if file sharing is running:

ps -ef | grep nfs, ps -ef | grep smb

If results are returned, determine the shares and confirm they are not in the same directory as listed above, If they are, this is a finding.

Fix Text (F-2275r3_fix)
Remove the shares from the applicable directories.