Ensure Unused Features are Removed

OrtaDüzey 1Manuel incelemewebsphere

Açıklama

The Websphere Liberty architecture provides developers with the option to tune their server to only the features that they need. For example, the JDBC feature only needs to be added if database access is required. If you did not want any remote administrative access to the REST interface, you would remove the REST feature. TMAegis cannot evaluate this reliably, so it is reported as a manual review item with the audit steps.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Review the configuration for features not being used in Liberty configuration. This includes aggregated features containing multiple features. The features are listed under in the featureManager element. To review all of the individual features used in the server, review the messages.log for the CWWKF0012I message. grep -w -R -i CWWKF0012I ${server.config.dir}

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Removed any unneeded features listed under the featureManager element in the Liberty configuration

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: webspheremanual-review
Referans: CIS IBM WebSphere Liberty Benchmark v1.0.0 - 10.1 Ensure Unused Features are Removed