What steps should I take to secure Tomcat 6.x?
- by PAS
I am in the process of setting up an new Tomcat deployment, and want it to be as secure as possible.
I have created a 'jakarta' user and have jsvc running Tomcat as a daemon. Any tips on directory permissions and such to limit access to Tomcat's files?
I know I will need to remove the default webapps - docs, examples, etc... are there any best…