How To Disable the Java Attach API in Fuse, As Well As Its Dynamically Allocated Port

Solution In Progress - Updated -

Issue

When a Fuse container is started, you may notice a dynamically allocated port number that is created by the JVM, and not Fuse. This port is created by the JVM to allow diagnostic utilities (e.g., JConsole) to attach to the process via the Java Attach API (JA-API). Some security-conscious end-users may wish to disable this port and API. To disable the API and port, one typically assigns the the JVM the "-XX:+DisableAttachMechanism" option. However, Fuse also assigns the -Dcom.sun.management.jmxremote option to the DEFAULT_JAVA_OPTS environment variable, which negates -XX:+DisableAttachMechanism.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.