apache

func CollectApacheHttpdPosture ¶

func CollectApacheHttpdPosture(ctx context.Context, services []payload.ServiceEntry, listeners []payload.Listener) *payload.ApacheHttpdPosture

CollectApacheHttpdPosture runs allowlisted -v, -S, -M and bounded config analysis when an Apache server binary is found. On Debian/Ubuntu, commands go through apache2ctl when present so /etc/apache2/envvars is applied (${APACHE_RUN_DIR} etc.); bare apache2 -S fails without that environment. bin_path remains the server binary path. listeners should be the same-scan TCP listener snapshot (after collect_listeners) for Listen cross-checks. Returns nil when no Apache binary is present.