Details

By default no deployment.config file exists; thus, no system-wide deployment.properties file exists. The file must be created. The deployment.config file is used for specifying the location and execution of system-level properties for the Java Runtime Environment. Without the deployment.config file, setting particular options for the Java control panel is impossible.

Solution

Create a JRE deployment configuration file as indicated:

/etc/.java/deployment/deployment.config

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_Oracle_JRE_8_UNIX_V1R3_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CAT|II
• CCI|CCI-000366
• CSCv6|3.1
• Rule-ID|SV-81211r1_rule
• STIG-ID|JRE8-UX-000010
• Vuln-ID|V-66721

Source

• Tenable.com/audits