I've defined some parameters to file /usr/lib/jvm/jre-8-oracle-x64/lib/security/java.security
to comply JAVA security settings with our security policy.
Some parameter I have edited are
security.overridePropertiesFile=false
jdk.tls.disabledAlgorithms= ...
jdk.certpath.disabledAlgorithms=MD2,...
It is unclear to me if a developer could set custom parameter in an application, does the JVM enforce these parameters or can they be overridden ?
I've seen there this question already about Java security Policy but I'm my case I just want the system-policy to be applied.
policy.expandProperties
property to false, remove the users.java.policy
entry, and makes thejava.security
file read only by the end users. With this you can established a sanbox that cannot be modified by end users.