Hello list,
I just wanted to know if it was on purpose that the xccdf rules
"httpd_servertokens_prod" and "httpd_serversignature_off" have no
OVAL
checks defined/written?
I suppose it has something to do with the difficulty to write the most
valid test. Considering that just testing for ServerToken and signature in
httpd.conf might not be enough to guarantee that the setting is enabled.
Correct?
Thanks in advance for your feedback.
Ronald