9.2 Disabling auto deployment of applications

Information

Tomcat allows auto deployment of applications while Tomcat is running. It is recommended that this capability be disabled.

Solution

In the $CATALINA_HOME/conf/server.xml file, change autoDeploy to false.

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: 88192af1e4fc2469708e420f541a9987b49a71bf22e0f974e2310f88b0231f31