-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Robert,

On 5/27/16 1:16 PM, Robert Youngblood wrote:
> I was recently cited for these pages not being locked down. Is
> there a way to remove or lockdown the default pages?

What default pages? Do you mean the "docs" web application?

$ rm -rf webapps/docs

You might want to remove the other stock applications as well... you
should only be deploying those on a test/dev server.

I always recommend a split CATALINA_HOME/CATALINA_BASE where
CATALINA_HOME has a stock Tomcat deployment (including all of the
optional web applications in CATALINA_HOME/webapps) and then only my
own web applications in CATALINA_BASE/webapps.

That way, you don't have to remember to remove the sample applications.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBCAAGBQJXSIfyAAoJEBzwKT+lPKRYjoIQAKVOs1VgP9zLXtog763TfVjq
4Wgy/oVpkWkqh/JfTFX9UyN1c5er0VZ9bTD+T8qyD74OY22hIh88Fm63CgMzTKUa
ffesrlz6u8jtW2Xn9JEgkVqV4dVHwh7oibuJSp172Z9PhTCS+EYkpp2krXe+7Otx
pKwBL1eCEB1dRDJdzwfQOHAuJRGqEzoKPvbs5Zh6xiNamcW0gygP1rBJTAj9T1aR
CSbcG1979mOJ/j2JdKh1LF7nvyDdyHa9IcjOvvLlFnUQKNESG1MIxuHlMuO9VfCu
/6u9fpCHuN+CXvEgNmeNtzzr8+mn/eP7K+J+hy3ahD3KMzt2WwzT/RGqh759s26S
rvr8W3d5fESD9SHrzjGe5iLPWWZlc8MiZU2vsUkyGNJqbDaOB+KB5qkhYTpnhcU7
A1hmFQDxghEwNpHluEjT9Ob9iR4FsFkimohcUcg0SfDmtRCMo9Yl068kPj44tFnF
M8En57BF30EkZl9Gg5smALu+EycfYanSnjiU4rZLMLUwaR+YOBMHejY+9MooBrvm
xf1zK7V+1WMnfg8fVxGTXeqC5fN+7UKLr+8XID05ATyAKJSSGciz3B8gWbzfGuzY
rkB+0s8akFFnMgXVHIIVdZyLFel0+ebFIeyZov6a37Tv3h9jEtcJEeqDtL4NmBa+
Ja0S62rO+Ssm/kBp3h1/
=KDFO
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to