Ensure Websphere Liberty file system access is Restricted

中レベル 1手動レビューwebsphere

説明

The permissions of files and directories underneath ${wlp.install.dir} should follow the principle of least privilege. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Check the permissions of ${wlp.install.dir}: ls -l -R ${wlp.install.dir} | awk '{print $1}' Expected result: All files should show permissions of the form (d)rw(x)r-(x)---. The d(directory) and x(executable) flags may or may not exist depending on the file type, however the r(read) and w(write) flags should always appear in the same position as the above output.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Change WebSphere Liberty file system access to 750 (owner has read/write/execute, group has read/execute, other has no access): chmod –R 750 ${wlp.install.dir}

プロパティ

オペレーティングシステム: すべて
タグ: webspheremanual-review
参照: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 1.8 Ensure Websphere Liberty file system access is Restricted