4.9 Restrict access to Tomcat catalina.properties

Information

catalina.properties is a Java properties files that contains settings for Tomcat including class loader information, security package lists, and performance properties. It is recommended that access to this file has the proper permissions to properly protect from unauthorized changes.

Solution

Perform the following to restrict access to catalina.properties:
1. Set the ownership of the $CATALINA_HOME/conf/catalina.properties to
tomcat_admin:tomcat.
2. Remove read, write, and execute permissions for the world.
3. Remove write permissions for the group.
# chown tomcat_admin:tomcat $CATALINA_HOME/conf/catalina.properties
# chmod g-w,o-rwx $CATALINA_HOME/conf/catalina.properties

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6

Plugin: Unix

Control ID: cfd7b1b14ab0ca02b42ba8191b7208b9e19919b0d5e8c12053934511672ea3e8