Apache Tomcat 7 - Config Reference Home

/var/tomcatc/conf/ is a link to /etc/tomcat/

/var/tomcat/conf/catalina.policy

• security settings: what component is allowed to do what

/var/tomcat/conf/catalina.properties

• add to the .jar files loaded by default

/var/tomcat/conf/web.xml
Default webapps settings.

• directory listing on missing welcom-file-list yes/no
• mime types
• welcome-file-list (aka default document list)

/var/tomcat/conf/context.xml

• default set of monitored resources (WEB-INF/web.xml)
• …

/var/tomcat/conf/logging.properties

• logging (detail) settings

/var/tomcat/conf/server.xml

• Virtual host definitions:
  • appbase: /var/tomcat/webapps
  • unpackWAR: unpack WAR archives (true) or run directly from war (false)
  • autoDeploy: check for new stuff in xmlBase/appBase and deplay (true) or don't (false)
  • workDir: application tmp directory, each app gets own subdir

/var/tomcat/conf/tomcat-users.xml

• define user accounts
• no active accounts by default

Database drivers should go in /usr/local/tomcat/lib/

Create /var/tomcat/lib/org/apache/catalina/util/ServerInfo.properties with content:

server.info=

Don't want to display anything for version number? Leave everything after server.info= empty.
Don't want to leave it empty? Enter text after server.info.

Tomcat needs to be restarted to pick up (changes to) the ServerInfo.properties file.

Source:Apache Tomcat 7 - Security Considerations - Valves