First of all, you may want to reconsider granting java.security.AllPermission to the world.
That said, if you look in the JAVA_HOME/jre/lib directory you should see two files.

In java.security...