1.1.2 Ensure NGINX is installed from source

Information

Installing NGINX directly from source allows you to install NGINX without the use of a package manager.

Rationale:

Installing NGINX from source allows you to harden your instance of NGINX by minimizing modules. NGINX is unable to remove modules when installed using a package manager. By installing from source, you are able to minimize modules, however, some additional configuration will be required and updates will not be automated out of the box for you.

Impact:

By installing NGINX from source, you will have to manually upgrade NGINX or automate upgrades yourself. The default values for NGINX may also vary from this guide using this method.

Solution

Installation depends on the operating system platform. For a source build, consult the NGINX documentation 'Building nginx from Sources'.

Default Value:

NGINX is not installed by default.

See Also

https://workbench.cisecurity.org/benchmarks/17381

Item Details

Category: SYSTEM AND SERVICES ACQUISITION

References: 800-53|SA-22, CSCv7|2.2

Plugin: Unix

Control ID: ffa5aedb82976cd3cba817a74ead5337778f25b5241b4d4e09f43e039ed90655