Details
The directory attribute tells Tomcat where to store logs. The directory value should be a secure location with restricted access.
Solution
Perform the following:
1. Add the following properties into your logging.properties file if they do not exist
2. Set the location pointed to by the directory attribute to be owned by tomcat_admin:tomcat with permissions of o-rwx.
# chown tomcat_admin:tomcat
# chmod o-rwx
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.