Detections
Analytics
JBOS-AS-000475 - The application server must prevent non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
Information
Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges.Restricting non-privileged users also prevents an attacker who has gained access to a non-privileged account, from elevating privileges, creating accounts, and performing system checks and maintenance.
Solution
Run the following command.<JBOSS_HOME>/bin/jboss-cli.sh -c -> connect -> cd /core-service=management/access-authorization :write-attribute(name=provider, value=rbac)
Restart JBoss.
Map users to roles by running the following command. Upper-case words are variables.
role-mapping=ROLENAME/include=ALIAS:add(name-USERNAME, type=USER ROLE)
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_JBoss_EAP_6-3_V2R6_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6(10), CAT|II, CCI|CCI-002235, Rule-ID|SV-213539r961353_rule, STIG-ID|JBOS-AS-000475, STIG-Legacy|SV-76795, STIG-Legacy|V-62305, Vuln-ID|V-213539
Plugin: Unix
Control ID: 346f65f08b195ef89ead239ea6274ac6e4165c2bc3196b5ae3d511cd310c6175