documentation_complete: true

title: '<tt>httpd</tt> Core Modules'

description: |-
    These modules comprise a basic subset of modules that are likely needed for base <tt>httpd</tt>
    functionality; ensure they are not commented out in <tt>/etc/httpd/conf/httpd.conf</tt>:
    <pre>LoadModule auth_basic_module modules/mod_auth_basic.so
    LoadModule authn_default_module modules/mod_authn_default.so
    LoadModule authz_host_module modules/mod_authz_host.so
    LoadModule authz_user_module modules/mod_authz_user.so
    LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
    LoadModule authz_default_module modules/mod_authz_default.so
    LoadModule log_config_module modules/mod_log_config.so
    LoadModule logio_module modules/mod_logio.so
    LoadModule setenvif_module modules/mod_setenvif.so
    LoadModule mime_module modules/mod_mome.so
    LoadModule autoindex_module modules/mod_autoindex.so
    LoadModule negotiation_module modules/mod_negotiation.so
    LoadModule dir_module modules/mod_dir.so
    LoadModule alias_module modules/mod_alias.so</pre>
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.
