STIGQter: STIG Summary: F5 NGINX Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 25 Nov 2025:

NGINX must allow only the information system security manager (ISSM) (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

DISA Rule

SV-278386r1171910_rule

Vulnerability Number

V-278386

Group Title

SRG-APP-000090

Rule Version

NGNX-APP-000250

Severity

CAT II

CCI(s)

• CCI-000171 - Allow organization-defined personnel or roles to select the event types that are to be logged by specific components of the system.

Weight

10

Fix Recommendation

By default, nginx.conf has file permissions set to admins only. Performing the chmod command will set file permissions on nginx.conf.

sudo chmod 600 /etc/nginx/nginx.conf

This example command will set read/write permissions for the owner only.

Check Contents

Check the current permissions of nginx.conf:

ls -l /etc/nginx/nginx.conf
-rw-r--r-- 1 root root 0 May 23 15:04 /etc/nginx/nginx.conf

If file has write permissions for anyone other than the owner, this is a finding.

Vulnerability Number

V-278386

Documentable

False

Rule Version

NGNX-APP-000250

Severity Override Guidance

Check the current permissions of nginx.conf:

ls -l /etc/nginx/nginx.conf
-rw-r--r-- 1 root root 0 May 23 15:04 /etc/nginx/nginx.conf

If file has write permissions for anyone other than the owner, this is a finding.

Check Content Reference

M

Target Key

5720