Deactivate Web Directory Browsing
As a security best
practice, ensure that a user cannot browse through a directory because it can
increase the risk of exposure to directory traversal attacks.
- Verify that web directory browsing is deactivated for all directories.
- Open the/etc/httpd/httpd.confand/usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conffiles in a text editor.
- Verify that for each<Directory>listing, the option calledIndexesfor the relevant tag is omitted from theOptionsline.