Details

package.access grants or revokes access to listed packages during runtime. It is recommended that application access to certain packages be restricted.

Solution

Edit $CATALINA_BASE/conf/catalina.properties by adding allowed packages to the package.access list.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/266

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6

Source

• Tenable.com/audits