Details
The installation may provide example applications, documentation, and other directories which may not serve a production use.
Rationale:
Removing sample resources is a defense in depth measure which reduces potential exposures introduced by these resources.
Solution
Perform the following to remove extraneous resources:
$ rm -rf $CATALINA_HOME/webapps/docs
$CATALINA_HOME/webapps/examples
$CATALINA_HOME/webapps/ROOT
If the Manager and HOST-Manager application are not utilized, also remove the following resources:
$ rm -rf $CATALINA_HOME/webapps/host-manager
$CATALINA_HOME/webapps/manager
Default Value:
docs, examples, ROOT, manager and host-manager are default web applications shipped with Tomcat.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.