Ensure Websphere Liberty file system access is Restricted

보통레벨 1수동 검토websphere

설명

The permissions of files and directories underneath ${wlp.install.dir} should follow the principle of least privilege. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Check the permissions of ${wlp.install.dir}: ls -l -R ${wlp.install.dir} | awk '{print $1}' Expected result: All files should show permissions of the form (d)rw(x)r-(x)---. The d(directory) and x(executable) flags may or may not exist depending on the file type, however the r(read) and w(write) flags should always appear in the same position as the above output.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Change WebSphere Liberty file system access to 750 (owner has read/write/execute, group has read/execute, other has no access): chmod –R 750 ${wlp.install.dir}

속성

운영 체제: 모두
태그: webspheremanual-review
참고 자료: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 1.8 Ensure Websphere Liberty file system access is Restricted