10.18 Enable memory leak listener (verify present)

Information

The JRE Memory Leak Prevention Listener provides work-arounds for known places where the Java Runtime environment uses the context class loader to load a singleton as this will cause a memory leak if a web application class loader happens to be the context class loader at the time. The work-around is to initialise these singletons when this listener starts as Tomcat's common class loader is the context class loader at that time. It also provides work-arounds for known issues that can result in locked JAR files.

Solution

Uncomment the JRE Memory Leak Prevention Listener in $CATALINA_HOME/conf/server.xml
<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16

Plugin: Unix

Control ID: 1f13b054349040642c8a019a4d8c2f3decc2c877971efa68b476599f0143f519