- Management IP - review $jetty_home/contexts xml file

Details

A dedicated management IP should be configured



Avoid Unauthorizd user access to the server



NOTE: Please review the benchmark to ensure target compliance.


Solution

create .htaccess file in the root directory of your web application. Find in $jetty_home/contexts xml file, which corresponds to the name of your Jetty web application (test.xml in our case) and protect access to your application by HTAccessHandler, that uses the .htaccess policy file.


This control applies to the following type of system Unix.


Source