Ensure root does not have ownership of Websphere Liberty binaries

높음레벨 1수동 검토websphere

설명

Preventing the root user from owning files in the ${wlp.install.dir} directory prevents unauthorized commands or files from being run. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Check to ensure that no files or directories underneath ${wlp.install.dir} are owned by the root user or root group: ls -l -R ${wlp.install.dir} | awk '{print $3, $4}' Expected result: You should not see the root user or root group referenced in the output.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Set the ownership and group of ${wlp.install.dir} to something other than root: chown -R <non-root user>:<non-root group> ${wlp.install.dir}

속성

운영 체제: 모두
태그: webspheremanual-review
참고 자료: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 1.1 Ensure root does not have ownership of Websphere Liberty binaries