9.2 Disabling auto deployment of applications

Information

Tomcat allows auto deployment of applications while Tomcat is running. It is recommended that this capability be disabled.

Solution

In the $CATALINA_HOME/conf/server.xml file, change autoDeploy to false.

See Also

https://workbench.cisecurity.org/files/266

Item Details

Audit Name: CIS Apache Tomcat 7 L2 v1.1.0 Middleware

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: dcfdfe4ff7a80953e09b0372c91b6091bd09ffd07d20917d0ab108e5ad0d6991