How To Disable the Java Attach API in Fuse, As Well As Its Dynamically Allocated Port

Solution In Progress - Updated -

Issue

When a Fuse container is started, you may notice a dynamically allocated port number that is created by the JVM, and not Fuse. This port is created by the JVM to allow diagnostic utilities (e.g., JConsole) to attach to the process via the Java Attach API (JA-API). Some security-conscious end-users may wish to disable this port and API. To disable the API and port, one typically assigns the the JVM the "-XX:+DisableAttachMechanism" option. However, Fuse also assigns the -Dcom.sun.management.jmxremote option to the DEFAULT_JAVA_OPTS environment variable, which negates -XX:+DisableAttachMechanism.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content