Rotate your device back to portrait to use STIG Vault.
The Apache Tomcat Application Server 9 Security Technical Implementation Guide (V3 R5) has 79 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
From the Tomcat server run the following command:
sudo grep -I jmxremote.authenticate /etc/systemd/system/tomcat.service
sudo ps -ef |grep -i jmxremote
If the results are blank, this is not a finding.
If the results include:
-Dcom.sun.management.jmxremote.authenticate=false, this is a finding.
If using JMX for management of the Tomcat server, start the Tomcat server by adding the following command line flags to the systemd startup scripts in /etc/systemd/system/tomcat.service.
Environment='CATALINA_OPTS -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=true'
sudo systemctl start tomcat
sudo systemctl daemon-reload