Skip to content

Directory indexing must be disabled on directories not containing index files.

An XCCDF Rule

Description

Directory options directives are directives that can be applied to further restrict access to file and directories. If a URL which maps to a directory is requested, and there is no DirectoryIndex (e.g., index.html) in that directory, then mod_autoindex will return a formatted listing of the directory which is not acceptable.

Property Value
Responsibility Web Administrator

ID
SV-32755r1_rule
Version
WA000-WWA058 A22
Severity
Medium
Updated

Remediation Templates

A Manual Procedure

Edit the httpd.conf file and add an "-" to the Indexes setting, or set the options directive to None.