The configuration file must contain proper keys and values to deploy settings correctly.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32842	JRE0060-J6XP	SV-43236r1_rule		Medium

Description
The deployment configuration file must hold values of the location of the deployment.properties file as well as the enforcement of these properties. Without a proper path for the properties file, deployment would not be possible. If the path specified does not lead to a properties file, the value of the 'deployment.system. config. mandatory' key determines how to handle the situation. If the value of this key is true, JRE will not run if the path to the properties file is invalid.

Description

The deployment configuration file must hold values of the location of the deployment.properties file as well as the enforcement of these properties. Without a proper path for the properties file, deployment would not be possible. If the path specified does not lead to a properties file, the value of the 'deployment.system. config. mandatory' key determines how to handle the situation. If the value of this key is true, JRE will not run if the path to the properties file is invalid.

STIG	Date
Java Runtime Environment (JRE) 6 STIG for WinXP	2012-07-23

Details

Check Text ( C-41518r9_chk )
On 32-bit systems, navigate to the file indicated here: C:/Program Files/Java/jre6/lib/deployment.config Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre6/lib/deployment.properties' Verify the key 'deployment.system.config.mandatory' is set to 'false'. On 64-bit systems, navigate to the JRE configuration files: C:/Program Files/Java/jre6/lib/deployment.config Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre6/lib/deployment.properties' Verify the key 'deployment.system.config.mandatory' is set to 'false'. C:/Program Files(x86)/Java/jre6/lib/deployment.config Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre6/lib/deployment.properties' Verify the key 'deployment.system.config.mandatory' is set to 'false'. If the configuration files are not set as indicated, this is a finding.

Check Text ( C-41518r9_chk )

On 32-bit systems, navigate to the file indicated here:
C:/Program Files/Java/jre6/lib/deployment.config
Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre6/lib/deployment.properties'
Verify the key 'deployment.system.config.mandatory' is set to 'false'.

On 64-bit systems, navigate to the JRE configuration files:
C:/Program Files/Java/jre6/lib/deployment.config
Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre6/lib/deployment.properties'
Verify the key 'deployment.system.config.mandatory' is set to 'false'.
C:/Program Files(x86)/Java/jre6/lib/deployment.config
Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre6/lib/deployment.properties'
Verify the key 'deployment.system.config.mandatory' is set to 'false'.

If the configuration files are not set as indicated, this is a finding.

Fix Text (F-37154r7_fix)
Specify the path to the deployment.properties file and set the mandatory configuration values. On 32-bit systems, navigate to the JRE configuration file. C:\Program Files\Java\jre6\lib\deployment.config Include the following keys and values in the configuration file: 'deployment.system.config=file:C:/Program Files/Java/jre6/lib/deployment.properties' 'deployment.system.config.mandatory=false'. On 64-bit systems, navigate to the JRE configuration files: C:/Program Files/Java/jre6/lib/deployment.config Include the following keys and values in the configuration file: 'deployment.system.config=file:C:/Program Files/Java/jre6/lib/deployment.properties' 'deployment.system.config.mandatory=false'. C:/Program Files(x86)/Java/jre6/lib/deployment.config Include the following keys and values in the configuration file: 'deployment.system.config=file:C:/Program Files/Java/jre6/lib/deployment.properties' 'deployment.system.config.mandatory=false'.

Fix Text (F-37154r7_fix)

Specify the path to the deployment.properties file and set the mandatory configuration values.

On 32-bit systems, navigate to the JRE configuration file.
C:\Program Files\Java\jre6\lib\deployment.config
Include the following keys and values in the configuration file:
'deployment.system.config=file:C:/Program Files/Java/jre6/lib/deployment.properties'
'deployment.system.config.mandatory=false'.

On 64-bit systems, navigate to the JRE configuration files:
C:/Program Files/Java/jre6/lib/deployment.config
Include the following keys and values in the configuration file:
'deployment.system.config=file:C:/Program Files/Java/jre6/lib/deployment.properties'
'deployment.system.config.mandatory=false'.
C:/Program Files(x86)/Java/jre6/lib/deployment.config
Include the following keys and values in the configuration file:
'deployment.system.config=file:C:/Program Files/Java/jre6/lib/deployment.properties'
'deployment.system.config.mandatory=false'.