TCAT-AS-000270 – The first line of request must be logged.
Details The access logfile format is defined within a Valve that implements the org.apache.catalina.valves.AccessLogValve interface within the /opt/tomcat/server.xml configuration file:...
- Home
- Security Hardening
- DISA STIG Apache Tomcat Application Server 9 V2R3
DISA STIG Apache Tomcat Application Server 9 V2R3
TCAT-AS-000360 – $CATALINA_BASE/logs folder permissions must be set to 750.
Details Tomcat file permissions must be restricted. The standard configuration is to have all Tomcat files owned by root with...TCAT-AS-000361 – Files in the $CATALINA_BASE/logs/ folder must have their permissions set to 640.
Details Tomcat file permissions must be restricted. The standard configuration is to have all Tomcat files owned by root with...TCAT-AS-000100 – Connectors must be secured.
Details The unencrypted HTTP protocol does not protect data from interception or alteration which can subject users to eavesdropping, tracking,...TCAT-AS-000110 – The Java Security Manager must be enabled.
Details The Java Security Manager (JSM) is what protects the Tomcat server from trojan servlets, JSPs, JSP beans, tag libraries,...TCAT-AS-000170 – Tomcat servers behind a proxy or load balancer must log client IP.
Details When running Tomcat behind a load balancer or proxy, default behavior is for Tomcat to log the proxy or...TCAT-AS-000180 – AccessLogValve must be configured per each virtual host.
Details Application servers utilize role-based access controls in order to specify the individuals who are allowed to configure application component...TCAT-AS-000240 – Date and time of events must be logged.
Details The access logfile format is defined within a Valve that implements the org.apache.catalina.valves.AccessLogValve interface within the /opt/tomcat/server.xml configuration file:...TCAT-AS-000250 – Remote hostname must be logged.
Details The access logfile format is defined within a Valve that implements the org.apache.catalina.valves.AccessLogValve interface within the /opt/tomcat/server.xml configuration file:...TCAT-AS-000370 – Files in the $CATALINA_BASE/conf/ folder must have their permissions set to 640.
Details Tomcat file permissions must be restricted. The standard configuration is to have all Tomcat files owned by root with...