CyberStrikeus/CyberStrike - Page 35

cis-tomcat9-v120-10-2

Restrict access to the web administration application (Automated)

cis-tomcat9-v120-10-3

Restrict manager application (Manual)

cis-tomcat9-v120-10-4

Force SSL when accessing the manager application via HTTP (Manual)

cis-tomcat9-v120-10-5

Rename the manager application (Manual)

cis-tomcat9-v120-10-6

Enable strict servlet Compliance (Manual)

cis-tomcat9-v120-10-7

Turn off session facade recycling (Manual)

cis-tomcat9-v120-10-8

Do not allow additional path delimiters (Manual)

cis-tomcat9-v120-10-9

Configure connectionTimeout (Automated)

cis-tomcat9-v120-2-1

Alter the Advertised server.info String (Manual)

cis-tomcat9-v120-2-2

Alter the Advertised server.number String (Manual)

cis-tomcat9-v120-2-3

Alter the Advertised server.built Date (Manual)

cis-tomcat9-v120-2-4

Disable X-Powered-By HTTP Header and Rename the Server Value for all Connectors (Automated)

cis-tomcat9-v120-2-5

Disable client facing Stack Traces (Automated)

cis-tomcat9-v120-2-6

Turn off TRACE (Automated)

cis-tomcat9-v120-2-7

Ensure Sever Header is Modified To Prevent Information Disclosure (Automated)

cis-tomcat9-v120-3-1

Set a nondeterministic Shutdown command value (Automated)

cis-tomcat9-v120-3-2

Disable the Shutdown port (Automated)

cis-tomcat9-v120-4-1

Restrict access to $CATALINA_HOME (Automated)

cis-tomcat9-v120-4-2

Restrict access to $CATALINA_BASE (Automated)

cis-tomcat9-v120-7-1

Application specific logging (Automated)

cis-tomcat9-v120-7-2

Specify file handler in logging.properties files (Automated)

cis-tomcat9-v120-7-3

Ensure className is set correctly in context.xml (Automated)

cis-tomcat9-v120-7-4

Ensure directory in context.xml is a secure location (Manual)

cis-tomcat9-v120-7-5

Ensure pattern in context.xml is correct (Automated)

cis-tomcat9-v120-7-6

Ensure directory in logging.properties is a secure location (Automated)

cis-tomcat9-v120-8-1

Restrict runtime access to sensitive packages (Automated)

cis-tomcat9-v120-9-1

Disabling auto deployment of applications (Automated)

cis-tomcat9-v120-9-2

Disable deploy on startup of applications (Automated)

cis-tomcat9-v120-9-3

Disable deploy on startup of applications (Automated)

cis-bind-v100-1-1

Use a Split-Horizon Architecture (Manual)

cis-bind-v100-1-2

Do Not Install a Multi-Use System (Manual)

cis-bind-v100-1-3

Dedicated Name Server Role (Automated)

cis-bind-v100-1-4

Use Secure Upstream Caching DNS Servers (Manual)

cis-bind-v100-1-5

Installing ISC BIND 9 (Automated)

cis-bind-v100-10-1

Ensure SELinux Is Enabled in Enforcing Mode (Automated)

cis-bind-v100-10-2

Ensure BIND Processes Run in the named_t Confined Context Type (Automated)

cis-bind-v100-10-3

Ensure the named_t Process Type is Not in Permissive Mode (Automated)

cis-bind-v100-10-4

Ensure Only the Necessary SELinux Booleans are Enabled (Automated)

cis-bind-v100-2-1

Run BIND as a non-root User (Automated)

cis-bind-v100-2-2

Give the BIND User Account an Invalid Shell (Automated)