<Group id="intro">
<title>Introduction</title>
<description>
<!-- purpose and scope of guidance -->
The purpose of this guidance is to provide security configuration
recommendations and baselines for the Java Runtime Environment (JRE) application.
The guidance provided here should be applicable to all variants
(IBM, OpenJDK, Oracle, Sun) of the product. Recommended
settings for the basic application are provided.
<!-- audience -->The guide is intended for system administrators. Readers are assumed to
possess basic system administration skills for Unix-like systems, as well
as some familiarity with Red Hat's documentation and administration
conventions. Some instructions within this guide are complex.
All directions should be followed completely and with understanding of
their effects in order to avoid serious adverse effects on the system
and its security.
</description>

<Group id="how-to-use">
<title>How to Use This Guide</title>
<description>
Readers should heed the following points when using the guide.
</description>

<Group id="intro-read-sections-completely">
<title>Read Sections Completely and in Order</title>
<description>
Each section may build on information and recommendations discussed in
prior sections. Each section should be read and understood completely;
instructions should never be blindly applied. Relevant discussion may
occur after instructions for an action.
</description>
</Group>

<Group id="intro-test-non-production">
<title>Test in Non-Production Environment</title>
<description>
This guidance should always be tested in a non-production environment
before deployment. This test environment should simulate the setup in
which the system will be deployed as closely as possible.
</description>
</Group>

<Group id="intro-root-shell-assumed">
<title>Root Shell Environment Assumed</title>
<description>
Most of the actions listed in this document are written with the
assumption that they will be executed by the root user running the
<tt>/bin/bash</tt> shell. Commands preceded with a hash mark (#)
assume that the administrator will execute the commands as root, i.e.
apply the command via <tt>sudo</tt> whenever possible, or use
<tt>su</tt> to gain root privileges if <tt>sudo</tt> cannot be
used. Commands which can be executed as a non-root user are are preceded
by a dollar sign ($) prompt.
</description>
</Group>

<Group id="intro-formatting-conventions">
<title>Formatting Conventions</title>
<description>
Commands intended for shell execution, as well as configuration file text,
are featured in a <tt>monospace font</tt>. <i>Italics</i> are used
to indicate instances where the system administrator must substitute
the appropriate information into a command or configuration file.
</description>
</Group>

</Group>

</Group>
