AIOps

We see below files are created in /tmp on impact server.

/tmp/ .com_ibm_tools_attach]$ ls -ltr

total 0

-rw-rw-rw- 1 ncosys ncoadmin 0 Oct 31 12:15 _master

-rw-rw-rw- 1 ncosys ncoadmin 0 Oct 31 12:15 _notifier

-rw-rw-rw- 1 ncosys ncoadmin 0 Oct 31 12:15 _attachlock

drwx--x--t 2 ncosys ncoadmin 54 Oct 31 12:43 1735

drwx--x--t 2 ncosys ncoadmin 54 Oct 31 12:43 2094

drwx--x--t 2 ncosys ncoadmin 54 Oct 31 12:43 2082

Seems Nessus report is treating it as compliance issue, as file permissions are 666.

Files in /tmp/.com_ibm_tools_attach/ are created by Java virtual machine to implement Java Attach API feature.

Java

Attach API can be used by IBM support to connect to running CDC

instance and examine its internal state. It is described in following

link:

https://supportcontent.ibm.com/support/pages/node/478963

To meet the compliance requirement, you can just disable this feature from JVM level by adding following JVM option setting into your Impact process user profile :

export IBM_JAVA_OPTIONS=" -Dcom.ibm.tools.attach.enable=no"