SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: Rule 16. Runtime Environment (ENV)  
Author: Fred Long Aug 12, 2009
Last Changed by: David Svoboda Aug 07, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/VDdGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (6)
    Page: ENV03-J. Do not grant dangerous combinations of permissions
    Page: DUMMY ENV03-J
    Page: ENV00-J. Do not sign code that performs only unprivileged operations
    Page: ENV01-J. Place all security-sensitive code in a single JAR and sign and seal it
    Page: ENV04-J. Do not disable bytecode verification
    Page: ENV02-J. Do not trust the values of environment variables
Hierarchy
Parent Page
    Page: 2 Rules
Children (7)
    Page: ENV00-J. Do not sign code that performs only unprivileged operations
    Page: ENV01-J. Place all security-sensitive code in a single JAR and sign and seal it
    Page: ENV02-J. Do not trust the values of environment variables
    Page: ENV03-J. Do not grant dangerous combinations of permissions
    Page: ENV04-J. Do not disable bytecode verification
    Page: ENV05-J. Do not deploy an application that can be remotely monitored
    Page: ENV06-J. Production code must not contain debugging entry points
Labels
Global Labels (3)
Recent Changes
Time Editor  
Aug 07, 2025 08:17 David Svoboda View Changes
Aug 06, 2025 18:07 David Svoboda View Changes
Aug 06, 2025 17:26 David Svoboda View Changes
Aug 06, 2025 17:22 David Svoboda View Changes
REM cost reform
Mar 15, 2022 09:46 David Svoboda  
Outgoing Links
External Links (3)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
SEI CERT Oracle Coding Standard for Java (1)     Home page: SEI CERT Oracle Coding Standard for Java