Top
Systemwalker Service Quality Coordinator User's Guide (WebsiteManagement Functions Edition)
Systemwalker

4.2.3 Enhancing public Web server security

[Windows]

If this product is installed on an Internet public Web server or Proxy server, you can enhance security by changing the access authority to the installed resources. Follow the procedure below.

Note

Using the following command can change the access authority. However, this command is valid only for NTFS.

Access authority to directories/files

Change the access authority by using the sqcSetFileSec.exe command.

<Installation directory>\bin\sqcSetFileSec.exe <Variable file storage directory>

By executing the above command, the access authority to the installed resources is changed as follows:

Administrators: Full control

Everyone: Read/execute authorities only

SQC extended log

If the access authority is changed by the method, no SQC extended log can be collected.

If the SQC extended log needs to be collected, restore the access authority to the state when installed by following the method below. (However, security risks will be greater.)


<installation directory>\bin\sqcSetFileSec.exe -u <Variable file storage directory>\extend-log

<installation directory>\bin\sqcSetFileSec.exe -u <Variable file storage directory>\log


[UNIX]

Access authority to directories and files

The access authorities for the installed resources are set during installation as shown below:

Super user: Read/Write/Execute authorities

Others: Read/Execute authorities only

SQC extended log

After the installation, the SQC extended log cannot be collected.

If the SQC extended log needs to be collected, log in as a super user and then change the access authority by following the method below. (However, security risks will become greater.)

# chmod 777 /var/opt/FJSVssqc/extend-log

# chmod 777 /var/opt/FJSVssqc/log