Details

WebSphere uses role-based access controls to restrict access to log data. To take advantage of this capability, WebSphere administrators must identify specific users and place them into their respective roles. The auditor role is used for controlling access to logs.

Solution

On the system hosting the WebSphere application server, log on to the operating system with admin rights.

Navigate to the ‘WebSphere’ folder, change permissions on the folder. Do not propagate permissions to sub-folders.

For UNIX systems: set ‘WebSphere folder’ permissions to ‘770’.

For Windows systems: set ‘WebSphere folder’ permission to allow full control for SYSTEM, WebSphere user, and Admin Group. Do not propagate permissions to sub-folders.

Supportive Information

The following resource is also helpful.

• http://iasecontent.disa.mil/stigs/zip/U_IBM_WebSphere_Traditional_V9-x_V1R1_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.

References

• 800-53|AU-9
• CAT|II
• CCI|CCI-000163
• CSCv6|3.1
• Rule-ID|SV-95969r1_rule
• STIG-ID|WBSP-AS-000750
• Vuln-ID|V-81255

Source

• Tenable.com/audits