IBM WebSphere Liberty Server Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000109-AS-000070
<GroupDescription></GroupDescription>Group -
The WebSphere Liberty Server must be configured to offload logs to a centralized system.
<VulnDiscussion>Log processing failures include, but are not limited to, failures in the application server log capturing mechanisms or log s...Rule Medium Severity -
SRG-APP-000119-AS-000079
<GroupDescription></GroupDescription>Group -
The WebSphere Liberty Server must protect log information from unauthorized access or changes.
<VulnDiscussion>WebSphere Liberty provides the capability to encrypt and sign the log data to prevent unauthorized modification. - The secu...Rule Medium Severity -
SRG-APP-000121-AS-000081
<GroupDescription></GroupDescription>Group -
The WebSphere Liberty Server must protect log tools from unauthorized access.
<VulnDiscussion>Protecting log data also includes identifying and protecting the tools used to view and manipulate log data. Depending on the...Rule Medium Severity -
SRG-APP-000126-AS-000085
<GroupDescription></GroupDescription>Group -
The WebSphere Liberty Server must generate log records for authentication and authorization events.
<VulnDiscussion>Enabling authentication (SECURITY_AUTHN) and authorization (SECURITY_AUTHZ) event handlers configures the server to record se...Rule Medium Severity -
The WebSphere Liberty Server must be configured to encrypt log information.
<VulnDiscussion>Protection of log records is of critical importance. Encrypting log records provides a level of protection that does not rely...Rule Medium Severity -
SRG-APP-000133-AS-000092
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.