TCAT-AS-000580 - Documentation must be removed.

Information

Tomcat provides documentation and other directories in the default installation which do not serve a production use. These files must be deleted.

Solution

From the Tomcat server OS type the following command:

sudo rm -rf $CATALINA_BASE/webapps/docs

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apache_Tomcat_Application_Server_9_V3R4_STIG.zip

Item Details

Audit Name: DISA STIG Apache Tomcat Application Server 9 v3r4 Middleware

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|III, CCI|CCI-000381, Rule-ID|SV-222960r960963_rule, STIG-ID|TCAT-AS-000580, STIG-Legacy|SV-111445, STIG-Legacy|V-102503, Vuln-ID|V-222960

Plugin: Unix

Control ID: de3defa2800d6b08e1129baea7a176e521b963eabd0629a80c242b68e9a79899