CCE-92224-5| Platform: Amazon Linux | Date: (C)2018-10-29 (M)2022-10-10 |
Set Permissions on the /var/log/httpd/ Directory
Ensure that the permissions on the web server log directory is set to 700:
'$ sudo chmod 700 /var/log/httpd/'
This is its default setting.
Parameter:
Technical Mechanism:
Access to the web server's log files may allow an unauthorized user or attacker
to access information about the web server or alter the server's log files.
Fix:
No Remediation Info
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48411 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48728 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48411 |
