17 - Restrict access to JETTY.properties - mode


JETTY.properties is a Java properties files that contains settings for Jetty, including class loader information, security package lists, and performance properties. It is recommended that access to this file has the proper permissions to properly protect from unauthorized changes.

Restricting access to this file will prevent local users from maliciously or inadvertently altering s security policy.


To restrict access to JETTY.policy perform the following actions:
1. Set the ownership of the $JETTY_HOME/...../JETTY.policy to _admin:.
2. Remove read, write, and execute permissions for the world.
3. Remove write permissions for the group.
# chown _admin: $JETTY_HOME/..../JETTY.properties # chmod g-w,o-rwx $JETTY_HOME/...../JETTY.properties

Item Details


References: 800-53|AC-6

Plugin: Unix

Control ID: 26c226a14642bc5c8a8f0e900c44aa31c214ba186acfcfcdda4e8e951d7972f4