Documentation - V-214321

Title

The Apache web server must provide install options to exclude the installation of documentation, sample code, example applications, and tutorials.

Description

<VulnDiscussion>Web server documentation, sample code, example applications, and tutorials may be an exploitable threat to a web server because this type of code has not been evaluated and approved. A production web server must only contain components that are operationally necessary (e.g., compiled code, scripts, web-content, etc.). Any documentation, sample code, example applications, and tutorials must be removed from a production web server. To ensure that the documentation and code are not...

Fix Text (Documentation Requirement)

Remove any unnecessary applications.