Details

Ensure the className attribute is set to AccessLogValve. The className attribute determines the access log valve to be used for logging.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Add the following statement into the $CATALINA_BASEwebappsMETAINFcontext.xml file if it does not already exist.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/266

This control applies to the following type of system Unix.

Source

• Tenable.com/audits