UCF STIG Viewer Logo

The configuration file must contain proper keys and values to deploy settings correctly.


Overview

Finding ID Version Rule ID IA Controls Severity
V-32842 JRE0060-J7XP SV-43644r1_rule Medium
Description
This configuration file must hold values of the location of the deployment.properties file, as well as the enforcement of these properties. Without a proper path for the properties file, deployment would not be possible. If the path specified does not lead to a properties file the value of the 'deployment.system.config. mandatory' key determines how to handle the situation. If the value of this key is true, JRE will not run if the path to the properties file is invalid.
STIG Date
Java Runtime Environment (JRE) 7 STIG for WinXP 2012-07-23

Details

Check Text ( C-41519r3_chk )
On 32-bit systems, navigate to the file indicated here:
C:/Program Files/Java/jre7/lib/deployment.config
Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre7/lib/deployment.properties'
Verify the key 'deployment.system.config.mandatory' is set to 'false'.

On 64-bit systems, navigate to the JRE configuration files:
C:/Program Files/Java/jre7/lib/deployment.config
Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre7/lib/deployment.properties'
Verify the key 'deployment.system.config.mandatory' is set to 'false'.

C:/Program Files(x86)/Java/jre7/lib/deployment.config
Verify the key 'deployment.system.config' is set to 'file:C:/Program Files/Java/jre7/lib/deployment.properties'
Verify the key 'deployment.system.config.mandatory' is set to 'false'.

If the configuration files are not set as indicated, this is a finding.
Fix Text (F-37155r5_fix)
Specify the path to the deployment.properties file and set the mandatory configuration values.

On 32-bit systems, navigate to the JRE configuration file.
C:\Program Files\Java\jre7\lib\deployment.config
Include the following keys and values in the configuration file:
'deployment.system.config=file:C:/Program Files/Java/jre7/lib/deployment.properties'
'deployment.system.config.mandatory=false'.

On 64-bit systems, navigate to the JRE configuration files:
C:/Program Files/Java/jre7/lib/deployment.config
Include the following keys and values in the configuration file:
'deployment.system.config=file:C:/Program Files/Java/jre7/lib/deployment.properties'
'deployment.system.config.mandatory=false'.
C:/Program Files(x86)/Java/jre7/lib/deployment.config
Include the following keys and values in the configuration file:
'deployment.system.config=file:C:/Program Files/Java/jre7/lib/deployment.properties'
'deployment.system.config.mandatory=false'.