In Appendix A of the JAAS reference guide:
there is a section labeled Sample Master Security Properties file which shows a modified copy of the java.security file. There are a couple of problems with this section:
1. The java.security file is out-of-date and currently includes many new properties.
2. Keeping this in-sync with the java.security file would need to be periodically done
3. Modifications to the java.security file can be overwriten by JRE updates
I recommend removing this section because of the above issues. However, we should mention (probably at the beginning of Appendix A) that any modifications to the java.security file may be overwritten by subsequent JRE updates, and to avoid this, the user should consider specifying an alternate java.security file as described in the suggested fix for CR 7133344.
Finally, there are a couple of references to "Sun Microsystems" in this guide that should be changed to "Oracle".