The URL-path name must be set to the file path name or the directory path name.
An XCCDF Rule
Description
The ScriptAlias directive controls which directories the Apache server "sees" as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.
| Property | Value |
|---|---|
| Responsibility | Web Administrator |
- ID
- SV-33229r1_rule
- Version
- WA00560 A22
- Severity
- Medium
- Updated
Remediation Templates
A Manual Procedure
Edit the httpd.conf file and set the ScriptAlias URL-path and file-path or directory-path entries.