Ensure that only one user ID has write access to the WebSphere Liberty configuration files

OrtaDüzey 1Manuel incelemewebsphere

Açıklama

Ensure that only one user ID has write access to the WebSphere Liberty configuration files. If there are multiple administrators, they can use sudo and the /etc/sudoers file to elevate their privilege when write access is required. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Verify that all WebSphere administrators have been added to the group that owns the server's configuration directory, which will grant them read but not write access. Ensure that the user that owns the server's configuration directory is a non-login user. Use sudo and the /etc/sudoers file to grant the administrators the ability to elevate their privilege to the user that owns the server's configuration directory when write access is required.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Create a single, non-login, user ID that owns the server's configuration directory. Add any WebSphere administrators to the group that owns the server's configuration directory, which will automatically give them read access to the server's configuration, but not write access. Use sudo and the /etc/sudoers file to allow these administrators to elevate their privilege to the user ID that owns the server's configuration directory when write access is required.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: webspheremanual-review
Referans: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 1.4 Ensure that only one user ID has write access to the WebSphere Liberty configuration files