10.15 Do not run applications as privileged

Information

Setting the privileged attribute for an application changes the class loader to the Server class loader instead of the Shared class loader.

Solution

In all context.xml, set the privileged attribute to false unless it is required like the manager application:
<Context ... privileged="false" />

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6

Plugin: Unix

Control ID: 4b8ed2ec51de34415d64e04f510a3c757ef86647b69abde4e709810693d07343