How to disable JDWP interface on linux server?

5.6k Views Asked by At

I've seen this question on stackoverflow, but without a clear answer. How do you disable JDWP on linux server? We had a security team recommend to disable JDWP due to RCE.

Ref: https://ioactive.com/hacking-java-debug-wire-protocol-or-how/

Thank you.

1

There are 1 best solutions below

0
Andreas On

JDWP is only enabled if you ask for it (-agentlib:jdwp), so:
To disable: Don't ask.

To see what not to do:
What are Java command line options to set to allow JVM to be remotely debugged?