Application server java.security configuration
I have questions for following notes in java.security file
# default value is forever (FOREVER). For security reasons, this
# caching is made forever when a security manager is set. When a security
# manager is not set, the default behavior in this implementation
# is to cache for 30 seconds.
#
# NOTE: setting this to anything other than the default value can have
# serious security implications. Do not set it unless
# you are sure you are not exposed to DNS spoofing attack.
#
#networkaddress.cache.ttl=-1
Questions:
1. When set networkaddress.cache.ttl=0 - no cache, what security implications are?
2. Our application servers are behind firewall, are we still exposed to DNS spoofing if we set it to no cache?
We are using PeopleTools 8.57.11 with Oracle DB 12.2.0.1, both are running on Oracle Linux 7.9 server
Answers
-
Hi @User_ZL9FO
I have moved your thread into the PEOPLESOFT (MOSC)/ PEOPLETOOLS AND LIFECYCLE MANAGEMENT - PSFT (MOSC) subcategory, so the subject matter experts will be able to engage.
In the meantime, feel free to review the following information that may assist in the future:
- How to Find and "Follow" Categories - Learn how to Follow Categories of interest
- Setting Up Category Notifications for New Content - Learn how to get notifications on content
- How to Search and Do Advanced Search - Learn how to get to advanced search and filter options
- Visit our MOSC Resource Center,
- Browse all of our represented Product Categories.
- How to Edit Your Community Username - Details are provided to change your default display name, which will allow for a more personalized profile.
- How to Ask a Question and View Answers in the My Oracle Support Community - My Oracle Support Community organization details are provided, which can be used to find the product subcategory for your question.
Best Regards,
Margi S.
My Oracle Support Community Administrator
0 -
If the application server is not exposed to the internet, then there would be no need to look at networkaddress.cache.ttl.
If the application server cannot be reached on the internet, which it should not be, then there is no issue here.
Here is more information if needed - https://docs.oracle.com/javase/7/docs/technotes/guides/net/properties.html
0
