By default the files in the directory /usr/share/apache2/icons are viewable on Apache based websites. It is considered to be a CPI scan security issue, requiring that access be blocked.
Included within the icons directory are two readme files README and REAME.html.
Exposing default files for view is considered to be a potential security risk. Whilst at the time of writing a known security risk is not associated with these files directly, there is the potential for information to be gained about the system, version and potential weaknesses by analysis of the file.
To restrict access to this file edit the file /etc/apache2/modes-available/alias.conf and change it from allow from all to deny from all, dor the given directory:
<Directory "/usr/share/apache2/icons"> Options FollowSymlinks AllowOverride None Order allow,deny Deny from all </Directory>
