documentation_complete: true

title: 'Restrict Root Directory'

description: |-
    The <tt>httpd</tt> root directory should always have the most restrictive configuration enabled.
    <pre>&lt;Directory / &gt;
       Options None
       AllowOverride None
       Order allow,deny
    &lt;/Directory&gt;</pre>

rationale: |-
    The Web Server's root directory content should be protected from unauthorized access
    by web clients.

severity: unknown

identifiers:
    cce: 27009-0
