tomcat安全加固

[root@zong ~]# cd /root/apache-tomcat-7.0.52/webapps

[root@zong webapps]# ls
docs examples host-manager manager ROOT

[root@zong webapps]# rm -rf docs examples

[root@zong conf]# vi /root/apache-tomcat-7.0.52/conf/server.xml

<Server port="8005" shutdown="TareNa39660"> //

<Connector port="8080" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="1000" minSpareThreads="100" maxSpareThreads="500"
enableLookups="false" acceptCount="700"
compression="on" compressionMinSize="2048"
connectionTimeout="30000" disableUploadTimeout="true"
redirectPort="8443" />

[root@zong conf]# vi /root/apache-tomcat-7.0.52/conf/web.xml

<param-name>listings</param-name>
<param-value>false</param-value> //修改false

 

 

新建普通用户，用普通用户启动

su -c /web/tomcat1/bin/./startup.sh tomcat