24 - Remove extraneous files and directories - $JETTY_BASE/webapps/doc

Information

The Jetty installation may provide sample demos of applications, documentation, and other directories which may not serve a production use.

Removing sample resources is a defense in depth measure that reduces potential exposures introduced by these resources.

Solution

Perform the following to remove extraneous resources:

1) The following should yield no output:
$ rm -rf $JETTY_BASE/webapps/js-examples
$JETTY_BASE/webapps/servlet-example
$JETTY_BASE/webapps/webdev
$JETTY_BASE/webapps/-docs
$JETTY_BASE/webapps/balancer
$JETTY_BASE/webapps/ROOT/admin
$JETTY_BASE/webapps/examples

2) If the Manager application is not utilized, also remove the following resources: $ rm rf $JETTY_HOME/server/webapps/host-manager $JETTY_HOME/server/webapps/manager $JETTY_HOME/conf/JETTY/localhost/host-manager.xml $JETTY_HOME/conf/JETTY/localhost/manager.xml

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7

Plugin: Unix

Control ID: 8cf6453456eeb02452b6d046cdfeaa6d763f3cca81c93476d529caa7625314e9