Cis Tomcat7 V100 8.1

---
name: cis-tomcat7-v100-8.1
description: "Restrict runtime access to sensitive packages"
category: cis-tomcat
version: "1.0.0"
author: cyberstrike-official
tags: [cis, tomcat, tomcat-7, catalina-policy]
cis_id: "8.1"
cis_benchmark: "CIS Apache Tomcat 7 Benchmark v1.0.0"
tech_stack: [tomcat, java]
cwe_ids: []
chains_with: []
prerequisites: []
severity_boost: {}
---

# CIS Apache Tomcat 7 - 8.1 Restrict runtime access to sensitive packages (Scored)

## Profile Applicability

- Level 1

## Description

Restrict runtime access to sensitive packages

## Rationale

See CIS Apache Tomcat 7 Benchmark v1.0.0 for detailed rationale.

## Audit Procedure

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 8.1 for audit commands.

## Remediation

Refer to CIS Apache Tomcat 7 Benchmark v1.0.0 Section 8.1 for remediation steps.

## References

- CIS Apache Tomcat 7 Benchmark v1.0.0

## Assessment Status

- **Scored**
- **Profile**: Level 1