Restrict access to Tomcat catalina.policy
Details The catalina.policy file is used to configure security policies for Tomcat. It is recommended that access to this file...
- Home
- Security Hardening
- CIS Apache Tomcat 7 L1 V1.1.0 Middleware
CIS Apache Tomcat 7 L1 V1.1.0 Middleware
Restrict access to Tomcat catalina.properties
Details catalina.properties is a Java properties files that contains settings for Tomcat including class loader information, security package lists, and...Restrict access to Tomcat configuration directory
Details The Tomcat $CATALINA_HOME/conf/ directory contains Tomcat configuration files. It is recommended that the ownership of this directory be tomcat_admin:tomcat....Restrict access to Tomcat context.xml
Details The context.xml file is loaded by all web applications and sets certain configuration options. It is recommended that access...Restrict access to Tomcat logging.properties
Details logging.properties is a Tomcat files that specifies the logging configuration. It is recommended that access to this file has...Restrict access to Tomcat logs directory
Details The Tomcat $CATALINA_HOME/logs/ directory contains Tomcat logs. It is recommended that the ownership of this directory be tomcat_admin:tomcat. It...Restrict access to Tomcat temp directory
Details The Tomcat $CATALINA_HOME/temp/ directory is used by Tomcat to persist temporary information to disk. It is recommended that the...Restrict access to Tomcat tomcat-users.xml
Details tomcat-users.xml contains authentication information for Tomcat applications. It is recommended that access to this file has the proper permissions...Restrict access to Tomcat web application directory
Details The Tomcat $CATALINA_HOME/webapps directory contains web applications that are deployed through Tomcat. It is recommended that the ownership of...Restrict runtime access to sensitive packages
Details package.access grants or revokes access to listed packages during runtime. It is recommended that application access to certain packages...