-
Enhancement
-
Resolution: Won't Do
-
Major
-
None
-
None
-
None
Need to harden docker image in a following way
secure the manager application to be only locally accessible. If the web administration application is used, its access must be restricted to only those with a required need as administrators:
- Open $CATALINA_HOME/conf/server.xml
add a context.xml added to manager app to ensure only local access
<Valve className="org.apache.catalina.valves.RemoteAddrValve"
allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" denyStatus="404" />
get rid of the special 404 page in the web.xml file of the manager application