mediumservicesverified ✓rollback-safe
Disable HTTP server
service-disable-httpd · RHEL ≥ 8 · 1 impl
Description
The Apache HTTP server provides web services. Unless the system is a designated web server, this service should be disabled.
Rationale
Running an unnecessary web server increases the attack surface and could expose sensitive information or provide a vector for attacks.
Check → Remediate
Checkservice_state
- name:
- httpd
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- httpd
Framework references
CIS
rhel8 2.1.19rhel9 2.1.18rhel10 2.1.18
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#web#attack-surface