Detections
Analytics

WBSP-AS-000760 - The WebSphere Application Server must protect log information from unauthorized deletion.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

WebSphere uses role based access controls to restrict access to log data. To take advantage of this capability, WebSphere administrators must identify specific users and place them into their respective roles. The auditor role is used for controlling access to logs.

Solution

On the system hosting the WebSphere application server, log on to the operating system with admin rights.

Navigate to the WebSphere folder, change permissions on the folder. Do not propagate permissions to sub-folders.

For UNIX systems: set 'WebSphere' folder permissions to '770'.

For Windows systems: set 'WebSphere' folder permission to allow full control for SYSTEM, WebSphere user, and Admin Group. Do not propagate permissions to sub-folders.

See Also

http://iasecontent.disa.mil/stigs/zip/U_IBM_WebSphere_Traditional_V9-x_V1R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-000164, CSCv6|3.1, Rule-ID|SV-95971r1_rule, STIG-ID|WBSP-AS-000760, Vuln-ID|V-81257

Plugin: Unix

Control ID: 420d58f660c46ac0524f810b3b9aa79e15d041bf1d5152ef0c99ee42a421fd47