About

Imported from CyberStrikeus/CyberStrike (.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md). Install upstream with npx skills add CyberStrikeus/CyberStrike --skill cis-tomcat10-v110-1.1. Copyright stays with the author.

Remove extraneous files and directories (Manual)

Name: cis-tomcat10-v110-1.1
Author: CyberStrikeus

Description

The installation may provide example applications, documentation, and other directories which may not serve a production use.

Rationale

Removing sample resources is a defense in depth measure that reduces potential exposures introduced by these resources.

Audit Procedure

Perform the following to determine the existence of extraneous resources:

$ ls -l $CATALINA_HOME/webapps/examples \
    $CATALINA_HOME/webapps/docs \
    $CATALINA_HOME/webapps/ROOT \
    $CATALINA_HOME/webapps/host-manager \
    $CATALINA_HOME/webapps/manager

No output implies no sample resources are present.

Remediation

Perform the following to remove extraneous resources:

$ rm -rf $CATALINA_HOME/webapps/docs \
    $CATALINA_HOME/webapps/examples \
    $CATALINA_HOME/webapps/ROOT

If the Manager and HOST-Manager application are not utilized, also remove the following resources:

$ rm -rf $CATALINA_HOME/webapps/host-manager \
    $CATALINA_HOME/webapps/manager

Default Value

docs, examples, ROOT, manager and host-manager are default web applications shipped with Tomcat.

References

https://tomcat.apache.org/tomcat-9.0-doc/security-howto.html#Default_web_applications/General

CIS Controls

v8:

4.8 Uninstall or Disable Unnecessary Services on Enterprise Assets and Software
- Uninstall or disable unnecessary services on enterprise assets and software, such as an unused file sharing service, web application module, or service function.

v7:

2.6 Address unapproved software
- Ensure that unauthorized software is either removed or the inventory is updated in a timely manner

Profile Applicability

Level 2

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/cyberstrikeus-cyberstrike-cis-tomcat10-v110-1-1/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

cyberstrikeus-cyberstrike-cis-tomcat10-v110-1-1.ocm.jsonjson

{
  "ocm": "1",
  "id": "cyberstrikeus-cyberstrike-cis-tomcat10-v110-1-1",
  "kind": "skill",
  "name": "cis-tomcat10-v110-1.1",
  "description": "Remove extraneous files and directories (Manual)",
  "publisher": "CyberStrikeus",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "cis",
      "tomcat",
      "linux",
      "java",
      "cleanup",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Remove extraneous files and directories (Manual)"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/CyberStrikeus/CyberStrike",
      "path": ".cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md",
      "ref": "df28ccd3dc6d6c02391169121ee2dcdf4a6a132b",
      "url": "https://github.com/CyberStrikeus/CyberStrike/blob/df28ccd3dc6d6c02391169121ee2dcdf4a6a132b/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md",
      "key": "CyberStrikeus/CyberStrike/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Tomcat/CIS_Apache_Tomcat_10_Benchmark_v1.1.0/cis-tomcat10-v110-1.1/SKILL.md"
    }
  },
  "instructions": "# Remove extraneous files and directories (Manual)\n\n## Description\n\nThe installation may provide example applications, documentation, and other directories which may not serve a production use.\n\n## Rationale\n\nRemoving sample resources is a defense in depth measure that reduces potential exposures introduced by these resources.\n\n## Audit Procedure\n\nPerform the following to determine the existence of extraneous resources:\n\n```bash\n$ ls -l $CATALINA_HOME/webapps/examples \\\n    $CATALINA_HOME/webapps/docs \\\n    $CATALINA_HOME/webapps/ROOT \\\n    $CATALINA_HOME/webapps/host-manager \\\n    $CATALINA_H",
  "cost": {
    "context_tokens": 440
  }
}

Fetch it by URL: GET /api/v1/registry/cyberstrikeus-cyberstrike-cis-tomcat10-v110-1-1/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.