Skip to content

Restrict Root Directory

An XCCDF Rule

Description

The httpd root directory should always have the most restrictive configuration enabled.

<Directory / >
   Options None
   AllowOverride None
   Order allow,deny
</Directory>

Rationale

The Web Server's root directory content should be protected from unauthorized access by web clients.

ID
xccdf_org.ssgproject.content_rule_httpd_restrict_root_directory
Severity
Unknown
References
Updated