No OVAL checks for Rules "httpd_servertokens_prod" and "httpd_serversignature_off"

Ronald mini.pelle at gmail.com
Mon Sep 1 11:24:01 UTC 2014


Hello list,

I just wanted to know if it was on purpose that the xccdf rules
"httpd_servertokens_prod" and "httpd_serversignature_off" have no OVAL
checks defined/written?

I suppose it has something to do with the difficulty to write the most
valid test. Considering that just testing for ServerToken and signature in
httpd.conf might not be enough to guarantee that the setting is enabled.
Correct?

Thanks in advance for your feedback.

Ronald
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140901/3e91556d/attachment.html>


More information about the scap-security-guide mailing list