The Order directive for the specified Directory directive should be configured appropriately. (1) Allow,Deny / Deny,Allow / Mutual-failure (1) TARGET: Directory directive (2) Apache configuration file: Order directive 1.7 Restricting Access p15 Security Configuration Benchmark For Apache Web Server CIS 2008-11-01 Version 2.2.0 Prose (PDF)