{"description": "Every <tt>DocumentRoot</tt> that is configured should have an\n<tt>index.html</tt> file that exists. Add an <tt>index.html</tt> file to every\nconfigured <tt>DocumentRoot</tt>.", "rationale": "The goal is to completely control the web users experience in navigating any\nportion of the web document root directories. Ensuring all web content\ndirectories have at least the equivalent of an index.html file is a significant\nfactor to accomplish this end. Also, enumeration techniques, such as URL\nparameter manipulation, rely upon being able to obtain information about the web\nserver's directory structure by locating directories with default pages. This\npractice helps ensure that the anonymous web user will not obtain directory\nbrowsing information or an error message that reveals the server type and\nversion.", "severity": "low", "references": {}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "it is not", "ocil": "To verify that each web content directory has an <tt>index.html</tt> file,\nrun the following command:\n<pre>$ sudo find `grep -i documentroot /etc/httpd/conf/httpd.conf | awk -F'\"' '{print $2}'` -name index.html</pre>\nThe output should return an <tt>index.html</tt> file for every\n<tt>DocumentRoot</tt> that is set.", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": [], "cpe_platform_names": [], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Each Web Content Directory Must Contain An index.html File", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/http/securing_httpd/httpd_secure_content/httpd_configure_documentroot/rule.yml", "template": null}