Details

The installation may provide example applications, documentation, and other directories which may not serve a production use.

Solution

Perform the following to remove extraneous resources:
1. The following should yield no output:
$ rm -rf $CATALINA_HOME/webapps/docs
$CATALINA_HOME/webapps/examples
If the Manager application is not utilized, also remove the following resources:
$ rm -rf $CATALINA_HOME/webapps/host-manager
$CATALINA_HOME/webapps/manager
$CATALINA_HOME/conf/Catalina/localhost/manager.xml

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/266

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.

Source

• Tenable.com/audits