The process ID (PID) file must be properly secured.ID: oval:org.secpod.oval:def:73564 | Date: (C)2021-06-29 (M)2023-07-04 |
Class: COMPLIANCE | Family: unix |
The PidFile directive sets the file path to the process ID file to which the server records the process id of the server, which is useful for sending a signal to the server process or for checking on the health of the process. If the PidFile is placed in a writable directory, other accounts could create a denial of service attack and prevent the server from starting by creating a PID file with the same name.
Product: |
Apache HTTP Server 2.2 |