Risk
Overly permissive ACLs allow unauthorized registrations and access to external programs.
ABAPJavaStandalone Gateway
Settings and priorities
| Technology / priority | Parameter or mechanism | Setting and purpose |
|---|---|---|
| ABAP Critical | secinfo ; reginfo | Maintained ACLs without allow-all rules Permit only expected sources. |
| ABAP Critical | gw/sec_info ; gw/reg_info | Correct ACL file paths Verify that every instance loads the files. |
| ABAP Critical | gw/reg_no_conn_info | Recommended 255 From kernel 7.40, use an odd value; older kernels require the relevant bits. |
| ABAP Critical | gw/acl_mode | 1 Enables the Initial Security Environment. |
| ABAP Critical | gw/monitor | 1 Allows local monitoring only. |
| ABAP Critical | gw/sim_mode | 0 in the target configuration Enforces controls instead of only simulating them. |
| ABAP Extended | gw/rem_start | DISABLED or SSH_SHELL Controls the method used to start programs. |
| ABAP Extended | gw/acl_mode_proxy ; gw/prxy_info | 1 and a maintained prxyinfo file Restricts RFC proxy according to kernel requirements. |
| Java Critical | RFC Gateway ACLs and operating mode | Apply the same Critical requirements as ABAP Protects the Gateway in a Java system. |
| Standalone Gateway Critical | RFC Gateway ACLs and operating mode | Apply the same Critical requirements as ABAP Protects standalone Gateway installations. |
How to verify
- Confirm ACL rules and file paths on every instance.
- Check bit settings for the installed kernel.
- Disable simulation after testing.
- Verify registration, startup and proxy use.