9.3 Disable deploy on startup of applications

Information

Tomcat allows auto deployment of applications. It is recommended that this capability be disabled.

Solution

In the $CATALINA_HOME/conf/server.xml file, change deployOnStartup to false.

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: 50da50e91d10a678ebb8a7469edebef5d431d04f3104886556e458702da8b98b