| 1.2 Ensure all configurations are made to the appropriate server profile | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 1.4 Ensure Technology Preview components are disabled in production environments | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 1.5 Disable Hot Deployment in production | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 1.6 Production applications should not implement the default SRPVerifierStore interface for the Secure Remote Password (SRP) protocol | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 1.9 Ensure appropriate DefaultDS is enabled | Redhat JBoss EAP 5.x | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.11 Ensure default HSQLDB is disabled | Redhat JBoss EAP 5.x | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.11 Ensure default HSQLDB is disabled - 'JBOSS_HOME/server/@PROFILE@/deploy/hsqldb-ds.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 1.12 Ensure HSQLDB Security Domain is removed - 'HsqlDbRealm = false' | Redhat JBoss EAP 5.x | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.14 - Ensure Oracle Database persistence plugin is set correctly - 'DatabasePersistencePlugin' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 2.28 Ensure all required information is displayed in <layout> - 'ConversionPattern = %d %-5p \[%c\] \(%t:%x\) %m%n' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 2.29 Production applications should not log output to the JBoss console - 'JBoss console output log = false' | Redhat JBoss EAP 5.x | Unix | AUDIT AND ACCOUNTABILITY |
| 2.1340 - The system must use a separate file system for /tmp (or equivalent). | Tenable Fedora Linux Best Practices v2.0.0 | Unix | |
| 7.2 - Unused features should be disabled or deleted: Enterprise Java Beans (EJB) Services - 'ejb2-container-jboss-beans.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.2 - Unused features should be disabled or deleted: Enterprise Java Beans (EJB) Services - 'ejb3-interceptors-aop.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.2 - Unused features should be disabled or deleted: Enterprise Java Beans (EJB) Services - 'ejb3-timerservice-jboss-beans.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.2 - Unused features should be disabled or deleted: Enterprise Java Beans (EJB) Services - 'profile-service-secured.jar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.3 - Unused features should be disabled or deleted: Universal Unique Identifier (UUID) Generator - 'uuid-key-generator.sar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.4 - Unused features should be disabled or deleted: Java Message Service (JMS) - 'messaging-definitions-jboss-beans.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.4 - Unused features should be disabled or deleted: Java Message Service (JMS) - 'messaging-roles.properties' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.4 - Unused features should be disabled or deleted: Java Message Service (JMS) - 'messaging-users.properties' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.4 - Unused features should be disabled or deleted: Java Message Service (JMS) - 'messaging' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.4 - Unused features should be disabled or deleted: Java Message Service (JMS) - 'quartz-ra.rar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.5 - Unused features should be disabled or deleted: JBoss Mail - 'mail-service.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.6 - Unused features should be disabled or deleted: JBoss Scheduling - 'schedule-manager-service.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.7 - Unused features should be disabled or deleted: Hypersonic SQL Database (HSQLDB) - 'data/hypersonic' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.7 - Unused features should be disabled or deleted: Hypersonic SQL Database (HSQLDB) - 'hsqldb-ds.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.7 - Unused features should be disabled or deleted: Hypersonic SQL Database (HSQLDB) - 'hsqldb-persistence-service.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.7 - Unused features should be disabled or deleted: Hypersonic SQL Database (HSQLDB) - 'hsqldb.jar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.8 - Unused features should be disabled or deleted: BeanShell (BSH) Deployer - 'bsh.deployer' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.9 - Unused features should be disabled or deleted: JBossWS - 'jax-ws-catalog.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.9 - Unused features should be disabled or deleted: JBossWS - 'jbossws-users.properties' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.9 - Unused features should be disabled or deleted: JBossWS - 'jbossws.deployer' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.10 - Unused features should be disabled or deleted: Seam - 'webbeans.deployer' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.11 - Unused features should be disabled or deleted: JBoss Internet Inter-ORB Protocol (IIOP) - 'ejb3-iiop-deployers-jboss-beans.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.11 - Unused features should be disabled or deleted: JBoss Internet Inter-ORB Protocol (IIOP) - 'iiop-service.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.11 - Unused features should be disabled or deleted: JBoss Internet Inter-ORB Protocol (IIOP) - 'jacorb.jar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.12 - Unused features should be disabled or deleted: Miscellaneous - 'hibernate-deployer-jboss-beans.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.12 - Unused features should be disabled or deleted: Miscellaneous - 'jmx-console.war' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.12 - Unused features should be disabled or deleted: Miscellaneous - 'profileservice-jboss-beans.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.12 - Unused features should be disabled or deleted: Miscellaneous - 'sqlexception-service.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.12 - Unused features should be disabled or deleted: Miscellaneous - 'xnio-provider.jar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.12 - Unused features should be disabled or deleted: Miscellaneous - 'xnio.deployer' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.13 - Unused features should be disabled or deleted: HTTP Invokers - 'http-invoker.sar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.13 - Unused features should be disabled or deleted: HTTP Invokers - 'httpha-invoker.sar' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.14 - Unused features should be disabled or deleted: Java Management Extensions (JMX) Invoker - 'deploy-hasingleton' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.14 - Unused features should be disabled or deleted: Java Management Extensions (JMX) Invoker - 'deploy/cluster' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.14 - Unused features should be disabled or deleted: Java Management Extensions (JMX) Invoker - 'farm' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.14 - Unused features should be disabled or deleted: Java Management Extensions (JMX) Invoker - 'jmx-invoker-service.xml' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.15 - Unused features should be disabled or deleted: Pooled Invoker - 'jboss:service=invoker,type=pooled = false' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
| 7.16 - Unused features should be disabled or deleted: Java Remote Method Protocol (JRMP) Invoker - 'jboss:service=invoker,type=jmrp = false' | Redhat JBoss EAP 5.x | Unix | CONFIGURATION MANAGEMENT |
