4.8 Restrict access to Tomcat catalina.policy

Information

The catalina.policy file is used to configure security policies for Tomcat. It is recommended that access to this file has the proper permissions to properly protect from unauthorized changes.

Solution

Perform the following to restrict access to $CATALINA_HOME/conf/catalina.policy.
1. Set the owner and group owner of the contents of
$CATALINA_HOME/conf/catalina.policy to tomcat_admin and tomcat, respectively.
# chmod 770 $CATALINA_HOME/conf/catalina.policy
# chown tomcat_admin:tomcat $CATALINA_HOME/conf/catalina.policy

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6

Plugin: Unix

Control ID: 5a989756e75f4a555bd32c9d1b04144370cc63afe66ea670fe11c0689f84edba