Restrict access to sensitive files and directories
Oracle recommends limiting the access to the files and directory containing sensitive information. In Linux environment, default files and directories to 740 or 640 permissions as applicable.
Some of the sensitive files are listed below:
- <WebLogic_Home>/user_projects/domains/<domain_name>/config/config.xml
- WebLogic_Home>/user_projects/domains/<domain_name>/config/*
- WebLogic_Home>/user_projects/domains/<domain_name>/servers/AdminServer/logs
- WebLogic_Home>/user_projects/domains/<domain_name>/servers/<ManagedServerName>/logs
Parent topic: Security Guidelines