Directory indexing must be disabled on directories not containing index files.
An XCCDF Rule
Description
Directory options directives are directives that can be applied to further restrict access to file and directories. If a URL which maps to a directory is requested, and there is no DirectoryIndex (e.g., index.html) in that directory, then mod_autoindex will return a formatted listing of the directory which is not acceptable.
Property | Value |
---|---|
Responsibility | Web Administrator |
- ID
- SV-32755r1_rule
- Version
- WA000-WWA058 A22
- Severity
- Medium
- Updated
Remediation Templates
A Manual Procedure
Edit the httpd.conf file and add an "-" to the Indexes setting, or set the options directive to None.