Detections
Analytics

1.23 IBMW-LS-000910

Information

The server.xml file must be protected from unauthorized modification.

GROUP ID: V-250344RULE ID: SV-250344r961461

When dealing with access restrictions pertaining to change control, it should be noted that any changes to the software, and/or application server configuration could potentially have significant adverse effects on the overall security of the system.

Protect the server.xml file from unauthorized modification by applying file permission restrictions.

Solution

As a privileged user with local file access to ${server.config.dir}/server.xml.

Use the chmod command to configure the correct file permissions of 660.

chmod 660 server.xml

See Also

https://workbench.cisecurity.org/benchmarks/23823

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5(1), CCI|CCI-001813, Rule-ID|SV-250344r961461_rule, STIG-ID|IBMW-LS-000910, Vuln-ID|V-250344

Plugin: Unix

Control ID: 79002fe3b8b7b0ac221ed84c10a79b23a654deb04c1121d896fa75443c073bd6