World Writable Harvest Files

Document ID : KB000040499
Last Modified Date : 14/02/2018
Show Technical Document Details

Question: 

After installing CA Harvest SCM on a Linux or Unix platrform our system administrator has noticed that some of the files installed have been granted "world-write" permisisons.  Can these permissions safely be removed to make the installation more secure?

Environment:  

CA Harvest SCM, all versions, Linux and Unix platforms

Answer: 

World write permissions can be removed from all files in the CA Harvest SCM installation folders except for the $CA_SCM_HOME/log folder.  This folder and all files inside it must be world-writable.