Adobe® ColdFusion® 10 Server Lockdown Guide

# cp jvm.config jvm.config.backup
To update using ColdFusion Administrator: click on Server Settings > Java and JVM and then add
/usr/java/latest/ to the Java Virtual Machine Path text box.
To update via shell: Edit jvm.config in a text editor to locate the line beginning with java.home= for
example:
java.home=/opt/coldfusion10/jre
Change that line to:
java.home=/usr/java/latest
The new jvm will be used after ColdFusion is restarted. Visit the System Information page of ColdFusion
administrator to confirm that the JVM has been updated. To revert to the default jvm replace jvm.config with
jvm.config.backup and restart ColdFusion.
4.2.7 Setup Auditing
First ensure that auditd is installed and configured to meet your requirements in
/etc/audit/auditd.conf
Use auditctl to add auditing to file system operations, for example:
auditctl -w /opt/coldfusion10 -p wax -k cf10
The above will audit all write, attribute change and execute operations on the path /opt/coldfusion10/
and tag all entries with the filter key cf10. Now that the filter key is setup you can query the audit log using
ausearch -k cf10
Keep in mind that the above might get a bit noisy if ColdFusion is writing a lot of log files, placing the log files
elsewhere will reduce this noise.
53