TCAT-AS-000580 - Documentation must be removed.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Tomcat provides documentation and other directories in the default installation which do not serve a production use. These files must be deleted.

Solution

From the Tomcat server OS type the following command:

sudo rm -rf $CATALINA_BASE/webapps/docs

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apache_Tomcat_Application_Server_9_V2R3_STIG.zip

Item Details

Audit Name: DISA STIG Apache Tomcat Application Server 9 v2r3

References: CAT|III, CCI|CCI-000381, Rule-ID|SV-222960r615938_rule, STIG-ID|TCAT-AS-000580, STIG-Legacy|SV-111445, STIG-Legacy|V-102503, Vuln-ID|V-222960

Plugin: Unix

Control ID: f35a4f97e1aad403ca791edd5231841321065554c86ddb998f0c93a308857f59