Details

This is a global requirement for any mission-critical application, your AS 7 instance should never run as root account in a secure environment.

Solution

Please refer to your operating system documentation to understand how to run AS7 as non privileged user.

Supportive Information

The following resource is also helpful.

• https://docs.jboss.org/author/display/AS72/Hardening+Guidelines

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6.

Source

• Tenable.com/audits