1.1 Remove extraneous files and directories (CONFIG_DIR/Catalina/localhost/host-manager.xml)

800-53|CM-7b.

1.1 Remove extraneous files and directories (CONFIG_DIR/Catalina/localhost/manager.xml)

1.1 Remove extraneous files and directories (SERVER_DIR/webapps/host-manager.xml)

1.1 Remove extraneous files and directories (SERVER_DIR/webapps/manager)

1.1 Remove extraneous files and directories (WEBAPP_DIR/balancer)

1.1 Remove extraneous files and directories (WEBAPP_DIR/examples)

1.1 Remove extraneous files and directories (WEBAPP_DIR/js-examples)

1.1 Remove extraneous files and directories (WEBAPP_DIR/ROOT/admin)

1.1 Remove extraneous files and directories (WEBAPP_DIR/servlet-example)

1.1 Remove extraneous files and directories (WEBAPP_DIR/tomcat-docs)

1.1 Remove extraneous files and directories (WEBAPP_DIR/webdav)

2.1 Alter the Advertised server.info String

800-53|SC-30(5)

2.2 Alter the Advertised server.number String

2.3 Alter the Advertised server.built Date

2.4 Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors

7.3 Ensure className is set correctly in context.xml

7.7 Configure log file size limit (verify java.util.logging.FileHandler.limit is present)

7.7 Configure log file size limit (verify java.util.logging.FileHandler.limit is smaller than disk partition)

9.2 Disabling auto deployment of applications

9.3 Disable deploy on startup of applications

10.2 Restrict access to the web administration

10.5 Rename the manager application (host-manager/manager.xml)

10.5 Rename the manager application (localhost/manager.xml)

10.5 Rename the manager application (webapps/manager)

10.8 Do not allow additional path delimiters (ALLOW_BACKSLASH)

10.8 Do not allow additional path delimiters (ALLOW_ENCODED_SLASH)

10.9 Do not allow custom header status messages

10.17 Do not resolve hosts on logging valves

CIS_Apache_Tomcat_7_L1_v1.1.0.audit Level 2