

Please make sure you test this in a test or staging environment first. Save this configuration in your tomcat directory conf: $/conf/catalina.policyīe aware that activating the “Security Manager” using the default configuration will most likely break your existing applications. You can fetch the a configuration directly from the apache tomcat website: It is a web server and a servlet container for Java web. This file contains the default configuration of the security manager. Apache tomcat is a Java based application server released by the Apache Software Foundation. However, it may be beneficial to have an dedicated user for Tomcat.


Create the configuration file catalina.policy With Java now installed we move on, installing Tomcat. It is disabled by default, but depending on your tomcat use-case, you may want to activate it. The “Java Security Manager” allows you to run each web application (WAR) of Tomcat 8 in a separate sandbox. Start Tomcat with enabled “Security Manager”.Create the configuration file catalina.policy.
