STIGQter: STIG Summary: APACHE 2.2 Site for UNIX Security Technical Implementation Guide Version: 1 Release: 11 Benchmark Date: 25 Jan 2019:

The LogLevel directive must be enabled.

DISA Rule

SV-33207r1_rule

Vulnerability Number

V-26282

Group Title

WA00620

Rule Version

WA00620 A22

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Edit the httpd.conf file and add the value LogLevel warn.

Check Contents

Enter the following command:

grep "LogLevel" /usr/local/apache2/conf/httpd.conf

The command should return the following value:

LogLevel warn

If the above value is not returned, this is a finding.
Note: If LogLevel is set to error, crit, alert, or emerg which are higher thresholds this is not a finding.

Vulnerability Number

V-26282

Documentable

False

Rule Version

WA00620 A22

Severity Override Guidance

Enter the following command:

grep "LogLevel" /usr/local/apache2/conf/httpd.conf

The command should return the following value:

LogLevel warn

If the above value is not returned, this is a finding.
Note: If LogLevel is set to error, crit, alert, or emerg which are higher thresholds this is not a finding.

Check Content Reference

M

Responsibility

Web Administrator

Target Key

161

Comments