CISOfy / lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
https://cisofy.com/lynis/
GNU General Public License v3.0
13.26k stars 1.48k forks source link

Httpd configuration: Can not determine symlink /etc/httpd/common/.conf #1212

Open Ahmadhashem86 opened 3 years ago

Ahmadhashem86 commented 3 years ago

Describe the bug Lynis couldn't open symlink files realted to apache

Function/test: [FileIsReadable] Message: Can not determine symlink /etc/httpd/common/.conf

Version

-Distribution 3.10.0-1160.42.2.el7.x86_64

Output If applicable, add output that you get from the tool or the related section of lynis.log

Function/test: [FileIsReadable] Message: Can not determine symlink /etc/httpd/common/.conf

Help improving the Lynis community with your feedback!

Additional context Add any other context about the problem here.

mboelen commented 3 years ago

Can you show me a bit information about that particular file? Like stat /etc/httpd/common/.conf and where it points to?

Ahmadhashem86 commented 3 years ago

stat /etc/httpd/common/.conf File: ‘/etc/httpd/common/.conf’ -> ‘/etc/httpd/common/.conf-maintenance’ Size: 35 Blocks: 0 IO Block: 4096 symbolic link Device: fd00h/64768d Inode: 40501910 Links: 1 Access: (0777/lrwxrwxrwx) Uid: ( 0/ root) Gid: ( 0/ root) Context: unconfined_u:object_r:httpd_config_t:s0 Access: 2021-09-30 14:39:18.528328764 +0200 Modify: 2021-05-03 10:34:37.909977136 +0200 Change: 2021-05-03 10:34:37.909977136 +0200 Birth: -

On Fri, 1 Oct 2021 at 11:10, Michael Boelen @.***> wrote:

Can you show me a bit information about that particular file? Like stat /etc/httpd/common/.conf and where it points to?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/CISOfy/lynis/issues/1212#issuecomment-932058621, or unsubscribe https://github.com/notifications/unsubscribe-auth/AP74U7HVIANTZKOBZGBF5HTUEV3IFANCNFSM5FCAHGZQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

-- Best Regards / Med vänliga hälsningar Ahmad Abu Hashem Sysadmin Mobile: +46 (0)768323877

Netset AB Adelgatan 9 - 211 22 Malmö - Sweden Målargatan 7 - 111 22 Stockholm - Sweden Head office: +46 (0)40 20 88 00 www.netset.com


Netset - Business to business e-commerce experts

mboelen commented 3 years ago

And does that .conf-maintenance file exist? If so, what is in it?

Ahmadhashem86 commented 3 years ago

this file /etc/httpd/common/test.conf-maintenance exist the content is:

DocumentRoot /var/www/html JkMount /status test

RewriteEngine On

ErrorDocument 503 /maintenance/index.html RewriteCond %{ENV:REDIRECT_STATUS} !=503 RewriteCond %{REQUEST_URI} !^/maintenance [nc] RewriteRule ^(/(?!status).*)$ /maintenance [R=503,L]

this file is included in a bigger conf file.

On Fri, 1 Oct 2021 at 11:34, Michael Boelen @.***> wrote:

And does that .conf-maintenance file exist? If so, what is in it?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/CISOfy/lynis/issues/1212#issuecomment-932074990, or unsubscribe https://github.com/notifications/unsubscribe-auth/AP74U7HX5O63XW5DXESQTSDUEV6DTANCNFSM5FCAHGZQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

-- Best Regards / Med vänliga hälsningar Ahmad Abu Hashem Sysadmin Mobile: +46 (0)768323877

Netset AB Adelgatan 9 - 211 22 Malmö - Sweden Målargatan 7 - 111 22 Stockholm - Sweden Head office: +46 (0)40 20 88 00 www.netset.com


Netset - Business to business e-commerce experts