documentation_complete: true

title: 'Ensure JBoss Files Are Owned By Appropriate Users'

description: |-
    All JBoss Fuse files within the installation directory should
    be owned by the JBoss process owner account.

rationale: |-
    To prevent unauthorized modification or disclosure of JBoss configuration
    settings, all files within the installation directory should be owned by
    the JBoss process owner account.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: AC-3

ocil_clause: 'JBoss files ownership is not correct'
