If the statement above is found enabled but without the appropriate LimitExcept or Order statement, this is a finding.
If the statement is not found inside an enabled directive, this is a finding.
Note: If the LimitExcept statement above is operationally limiting. This should be explicitly documented with the Web Manager, at which point this can be considered not a finding.
Fix Text (F-29499r1_fix)
Edit the https.conf file and add the following entries for every enabled directory except root.