Details

In order to have role based authentication inside our queue server you need to setup HornetQ with these directives.

You can restrict the access to particular queue (read/write) or even prevent the creation, deletion of new queues, with a basic role based access control.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Set the security-setting parameters to match needed requirements:

Supportive Information

The following resource is also helpful.

• https://docs.jboss.org/author/display/AS72/Hardening+Guidelines

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-3(7)

Source

• Tenable.com/audits