openj9-docs
openj9-docs copied to clipboard
Securing the Attach API enhancement - prevent a user from interfering the AttachAPI via file permission modification
Subject: https://eclipse.dev/openj9/docs/attachapi/
Suggestion:
_In the default Attach API directory you can find certain files that start with an underscore *, which are involved in synchronization. These files can be owned by any user but must have read and write permissions set. The files are empty and are automatically re-created if deleted. is changed to _In the default Attach API directory you can find certain files that start with an underscore *, which are involved in synchronization. By default these files can be owned by any user but must have read and write permissions set. The files are empty and are automatically re-created if deleted. To prevent a user from interfering the AttachAPI via file permission modification, root can be set as the folder/files owner to protect the file permissions.
@paulcheeseman fyi