9.3 Disable deploy on startup of applications

Information

Tomcat allows auto deployment of applications. It is recommended that this capability be disabled.

Solution

In the $CATALINA_HOME/conf/server.xml file, change deployOnStartup to false.

See Also

https://workbench.cisecurity.org/files/266

Item Details

Audit Name: CIS Apache Tomcat 7 L2 v1.1.0 Middleware

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: d90638c1d4c830cd692a65a4acba6cdbbbd9aa4eaf800d18ca50d0634e80ee24