documentation_complete: true

title: 'Ensure JBoss Files Have Correct Permissions'

description: |-
    All JBoss files within the installation directory should be
    readable by the JBoss process owner and JBoss administrators only.

rationale: |-
    To prevent unauthorized modification or disclosure of JBoss configuration
    settings, access to all files within the installation directory should be
    restricted to the JBoss process owner account and Jboss administrators.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: 'AC-3, AC-6'

ocil_clause: 'JBoss file permissions are not correct'
