IBM WebSphere
TMA-WEBSPHERE-1.3
Ensure only defined users have access to the file system
Mô tả
In Linux systems, there is a category of permission as others. These users are the ones who are not neither owner nor in a group associated with the file/folder. Since these users are anyone else than users defined, they should not have any access at all on Websphere Liberty file system. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Ensure that no one falling into other category have access to the Websphere Liberty file system. You should expect to see ---. ls -l -R ${wlp.install.dir} | awk '{print substr($1,length($1)-3,3)}'
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Ensure that other has no access to the system. chmod -R o-rwx ${wlp.install.dir}
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- webspheremanual-review
- Tham chiếu
- CIS IBM WebSphere Liberty Benchmark v1.0.0 - 1.3 Ensure only defined users have access to the file system