Rule ID
SV-250344r961461_rule
Version
V2R4
CCIs
When dealing with access restrictions pertaining to change control, it should be noted that any changes to the software, and/or application server configuration could potentially have significant adverse effects on the overall security of the system. Protect the server.xml file from unauthorized modification by applying file permission restrictions.
As a privileged user with local file access to ${server.config.dir}/server.xml, verify the server.xml file permissions are set to 660.
If the server.xml file permissions are not set to 660, this is a finding.As a privileged user with local file access to ${server.config.dir}/server.xml.
Use the chmod command to configure the correct file permissions of 660.
chmod 660 server.xml