Adobe 38043740 Lockdown Guide - Page 76

Disabling RDS if Already Installed, 6.3 Disabling support for JWS files

Page 76 highlights

In addition some servlets may depend on each other, so it may be better to just remove the servletmapping instead. Be sure to backup web.xml before making changes, as incorrect changes may prevent the server from starting. 6.2 Disabling RDS if Already Installed If RDS was installed on the server it may be disabled by placing XML comments around the RDS Servlet Mapping and the RDS Servlet. Remove the RDS Servlet mapping: RDSServlet /CFIDE/main/ide.cfm Remove the RDS Servlet definition: RDSServlet RDS Servlet coldfusion.bootstrap.BootstrapServlet servlet.class coldfusion.rds.RdsFrontEndServlet 6.3 Disabling support for JWS files 76

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87

76
In addition some servlets may depend on each other, so it may be better to just remove the
servlet-
mapping
instead.
Be sure to backup
web.xml
before making changes, as incorrect changes may prevent the server from
starting.
6.2 Disabling RDS if Already Installed
If RDS was installed on the server it may be disabled by placing XML comments around the RDS Servlet
Mapping and the RDS Servlet.
Remove the RDS Servlet mapping:
<servlet-mapping id="coldfusion_mapping_9">
<servlet-name>RDSServlet</servlet-name>
<url-pattern>/CFIDE/main/ide.cfm</url-pattern>
</servlet-mapping>
Remove the RDS Servlet definition:
<servlet id="coldfusion_servlet_8789">
<servlet-name>RDSServlet</servlet-name>
<display-name>RDS Servlet</display-name>
<servlet-class>coldfusion.bootstrap.BootstrapServlet</servlet-class>
<init-param id="InitParam_103401311065856789">
<param-name>servlet.class</param-name>
<param-value>coldfusion.rds.RdsFrontEndServlet</param-value>
</init-param>
</servlet>
6.3 Disabling support for JWS files