Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Java Runtime Environment (JRE) version 8 STIG for Unix

The Java Runtime Environment (JRE) version 8 STIG for Unix (V1 R3) has 16 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

16STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Fri Oct 27 2017

Oracle JRE 8 must be set to allow Java Web Start (JWS) applications.

Java Runtime Environment (JRE) version 8 STIG for Unix

Assessment Title

Rule Text

Description

Discussion Text

Java Web Start (JWS) applications are the most commonly used. Denying these applications could be detrimental to the user experience. Whitelisting, blacklisting, and signing of applications help mitigate the risk of running JWS applications.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-66915

Rule

SV-81405r1_rule

Severity

medium

Rule Version

JRE8-UX-000070

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Navigate to the system-level "deployment.properties" file for JRE.

 /etc/.java/deployment/deployment.properties

If the key "deployment.webjava.enabled=true" is not present in the deployment.properties file, or is set to "false", this is a finding.

If the key "deployment.webjava.enabled.locked" is not present in the deployment.properties file, this is a finding.

Implementation Procedure

Fix Text

Navigate to the system-level "deployment.properties" file for JRE.

 /etc/.java/deployment/deployment.properties

Add the key "deployment.webjava.enabled=true" to the deployment.properties file.

Add the key "deployment.webjava.enabled.locked" to the deployment.properties file.

STIG check 5 of 16 in the Java Runtime Environment (JRE) version 8 STIG for Unix checklist

← Previous · V-66913Oracle JRE 8 must default to the most secure built-in setting.Next · V-66917 →Oracle JRE 8 must disable the dialog enabling users to grant permissions to execute signed content from an untrusted authority.