Title

A configuration file must be present to deploy properties for JRE. (Cat II impact)

Discussion

The deployment.config file is used for specifying the location and execution of system-level properties for the Java Runtime Environment. By default no deployment.config file exists; thus, no system-wide deployment.properties file exists. 64-bit systems require two copies of the file, one for the 64-bit JRE and the other for the 32-bit JRE. Without the deployment.config file, setting particular options for the Java control panel is impossible.

Check Content

On 32-bit systems, verify that one JRE deployment configuration file exists as indicated: C:\Program Files\Java\jre7\lib\deployment.config On 64-bit systems, verify that two JRE deployment configuration files exist as indicated: C:\Program Files\Java\jre7\lib\deployment.config C:\Program Files (x86)\Java\jre7\lib\deployment.config If there are 32 bit and 64 bit versions of java running on the system and these configuration files do not exist as indicated, this is a finding.

Fix Text

On 32-bit systems, create a JRE deployment configuration file as indicated: C:\Program Files\Java\jre7\lib\deployment.config On 64-bit systems, create two JRE deployment configuration files as indicated: C:\Program Files\Java\jre7\lib\deployment.config C:\Program Files (x86)\Java\jre7\lib\deployment.config The deployment.config file is a text file containing 2 keys. The keys are: deployment.system.config = deployment.system.config.mandatory =

Additional Identifiers

Rule ID: SV-43296r2_rule

Vulnerability ID: V-32901

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.