How To Disable the Java Attach API in Fuse, As Well As Its Dynamically Allocated Port
Issue
When a Fuse container is started, you may notice a dynamically allocated port number that is created by the JVM, and not Fuse. This port is created by the JVM to allow diagnostic utilities (e.g., JConsole) to attach to the process via the Java Attach API (JA-API). Some security-conscious end-users may wish to disable this port and API. To disable the API and port, one typically assigns the the JVM the "-XX:+DisableAttachMechanism" option. However, Fuse also assigns the -Dcom.sun.management.jmxremote option to the DEFAULT_JAVA_OPTS environment variable, which negates -XX:+DisableAttachMechanism.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.