documentation_complete: true

prodtype: rhel7

title: 'Disable Proxy Support'

description: |-
    The <tt>proxy</tt> module provides proxying support, allowing <tt>httpd</tt> to forward requests and
    serve as a gateway for other servers. If its functionality is unnecessary, comment out the module:
    <pre>#LoadModule proxy_module modules/mod_proxy.so</pre>

    If proxy support is needed, load <tt>mod_proxy</tt> and the appropriate proxy protocol handler
    module (one of <tt>mod_proxy_http</tt>, <tt>mod_proxy_ftp</tt>, or <tt>mod_proxy_connect</tt>). Additionally,
    make certain that a server is secure before enabling proxying, as open proxy servers
    are a security risk. <tt>mod_proxy_balancer</tt> enables load balancing, but requires that
    <tt>mod status</tt> be enabled.

rationale: |-
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.

severity: unknown

identifiers:
    cce@rhel7: 80313-0
