change IBM openjdk tmp permission

 

Hi all

    Customer Linux/Unix Seccurity OP ask me , it scan the sentinel 8.5.0.1 appliance .

the report about IBM tools file permission:

rw-rw-rw- 1 root root 0 Aug 16 13:22 /tmp/.com_ibm_tools_attach/_master
rw-rw-rw- 1 root root 0 Aug 16 13:22 /tmp/.com_ibm_tools_attach/_notifier
rw-rw-rw- 1 root root 0 Aug 16 13:22 /tmp/.com_ibm_tools_attach/_attachlock

he ask whether these 3 file could remove "w(wirte)" on 'other' permission


Which sentinel function will be affect when I remove write of Other's permission ?

Thanks!!

wencheng

Tags: