Restrict access to Tomcat web application directory
Details The Tomcat $CATALINA_HOME/webapps directory contains web applications that are deployed through Tomcat. It is recommended that the ownership of...
- Home
- Security Hardening
- CIS Apache Tomcat 8 L1 V1.1.0 Middleware
CIS Apache Tomcat 8 L1 V1.1.0 Middleware
Restrict access to Tomcat web.xml
Details web.xml is a Tomcat configuration file that stores application configuration settings. It is recommended that access to this file...Restrict access to Tomcat tomcat-users.xml
Details tomcat-users.xml contains authentication information for Tomcat applications. It is recommended that access to this file properly protect against unauthorized...Restrict runtime access to sensitive packages
Details package.access grants or revokes access to listed packages during runtime. It is recommended that application access to certain packages...Set a nondeterministic Shutdown command value
Details Tomcat listens on TCP port 8005 to accept shutdown requests. By connecting to this port and sending the SHUTDOWN...Setting Security Lifecycle Listener – check for config component
Details The Security Lifecycle Listener performs a number of security checks when Tomcat starts and prevents Tomcat from starting if...Setting Security Lifecycle Listener – check for umask present in startup
Details The Security Lifecycle Listener performs a number of security checks when Tomcat starts and prevents Tomcat from starting if...Setting Security Lifecycle Listener – check for umask uncommented in startup
Details The Security Lifecycle Listener performs a number of security checks when Tomcat starts and prevents Tomcat from starting if...Specify file handler in logging.properties files – check if java.util.logging.ConsoleHandler exists inin default
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...Specify file handler in logging.properties files – check if java.util.logging.ConsoleHandler exists in web application
Details Handlers specify where log messages are sent. Console handlers send log messages to the Java console and File handlers...