WA000-WWA058 A22 - Directory indexing must be disabled on directories not containing index files.

Information

Directory options directives are directives that can be applied to further restrict access to file and directories. If a URL which maps to a directory is requested, and there is no DirectoryIndex (e.g., index.html) in that directory, then mod_autoindex will return a formatted listing of the directory which is not acceptable.

Solution

Edit the httpd.conf file and add an '-' to the Indexes setting, or set the options directive to None.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_UNIX_V1R11_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|II, Rule-ID|SV-32755r1_rule, STIG-ID|WA000-WWA058_A22, Vuln-ID|V-13735

Plugin: Unix

Control ID: 17a37f6e1a19b0e836a4c093e5b7c53321a65388a88e6baed8c7bcee8fd5b507