V-214254
Apache Server 2.4 UNIX Server Security Technical Implementation Guide
Title
The Apache web server must be built to fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.
Description
<VulnDiscussion>Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. For an application presenting publicly available information that is not critical, a safe state for failure might be to shut down for any type of failure, but for an application that presents critical and timely information, a shutdown might not be the best state for all failures. Performing a proper risk analysis o...
Fix Text (Documentation Requirement)
Prepare documentation for disaster recovery methods for the Apache 2.4 web server in the event of the necessity for rollback. Document and test the disaster recovery methods designed.