Ensure extraneous files and directories are removed

MediumLevel 1Manual reviewwebsphere

Description

The installation might provide example applications, documentation, and other directories which may not serve a production use. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Check for the existence of extraneous resources: $ ls -l ${wlp.user.dir}/extension \ ${wlp.user.dir}/shared \ ${wlp.user.dir}/server \ ${wlp.user.dir}/client There should be no non-production client extension/shared resource(s)/server/client in these folders

How it is fixed

Fix method: Guidance or infrastructure patch

Remove extraneous resources for each: Extension: $ rm -rf ${wlp.user.dir}/extension/<non-production extension> Shared resource(s): $ rm -rf ${wlp.user.dir}/shared/<non-production shared resource(s)> Server: $ rm -rf ${wlp.user.dir}/server/<non-production server> Client: $ rm -rf ${wlp.user.dir}/client/<non-production client>

Properties

Operating systems: Any
Tags: webspheremanual-review
Reference: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 1.2 Ensure extraneous files and directories are removed