Restrict access to sensitive files and directories

Oracle recommends limiting the access to the files and directory containing sensitive information. In Linux environment, default files and directories to 740 or 640 permissions as applicable.

Some of the sensitive files are listed below:

  • <WebLogic_Home>/user_projects/domains/<domain_name>/config/config.xml
  • WebLogic_Home>/user_projects/domains/<domain_name>/config/*
  • WebLogic_Home>/user_projects/domains/<domain_name>/servers/AdminServer/logs
  • WebLogic_Home>/user_projects/domains/<domain_name>/servers/<ManagedServerName>/logs