The Apache AllowOverride directive should be configured appropriately for web site root directories. (1) AuthConfig / FileInfo / Indexes / Limit / Options / All / None (1) Apache configuration file: AllowOverride directive L1 15. Directory Functionality/Features Directives p24 1.8 Directory Functionality Control with the Options Directive p17 CIS Apache Benchmark for Unix v1.7 For Apache Versions 1.3 and 2.0 CIS 2007-07-01 Version 1.7 Prose (PDF) Security Configuration Benchmark For Apache Web Server CIS 2008-11-01 Version 2.2.0 Prose (PDF)