Analyzing apache

audit/system/plugins/apache.py

@@ -8,9 +8,9 @@ def apache_protocols() -> dict:
     ssl["level"] = "high"
     ssl["protocols"] = list()
     # https://httpd.apache.org/docs/trunk/ssl/ssl_howto.html
-    ssl["protocols"].append("-TLSv1")
-    ssl["protocols"].append("-TLSv1.1")
-    ssl["protocols"].append("-SSLv3")
+    ssl["protocols"].append("TLSv1")
+    ssl["protocols"].append("TLSv1.1")
+    ssl["protocols"].append("SSLv3")
     ssl["recommand_value"] = "SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1"
 
     return ssl
@@ -20,7 +20,9 @@ def apache_signature() -> dict:
 
     signature["description"] = "Disable Apache signature"
     signature["level"] = "high"
-    signature['value'] = 'ServerSignature On'
+    signature['signature'] = list()
+    signature['signature'].append('ServerSignature On')
+    signature['signature'].append('ServerTokens Prod')
 
     return signature
 
@@ -29,6 +31,10 @@ def apache_indexes() -> dict:
 
     indexes['description'] = 'Disable files and directory indexes'
     indexes['level'] = 'medium'
-    indexes['value'] = 'Options -Indexes'
+    indexes['flag'] = 'Options'
+    indexes['options'] = list()
+    indexes['options'].append('Indexes')
+    indexes['options'].append('FollowSymLinks')
+    indexes['recommand_value'] = 'Options -Indexes -FollowSymLinks'
 
     return indexes