Web security planning - operating system permissions
Files that contain confidential information must be secured through operating system permissions.
The following files contain confidential information, such as user name and password combinations stored in clear text. These files should be secured through operating system permissions:
sandbox.cfg
<appserver>.log
jdbc.properties.in
yfs.properties.in
yifclient.properties.in