src/java.base/share/classes/java/security/Security.java

@@ -210,11 +210,11 @@
 
     private static File securityPropFile(String filename) {
         // maybe check for a system property which will specify where to
         // look. Someday.
         String sep = File.separator;
-        return new File(System.getProperty("java.home") + sep + "lib" + sep +
+        return new File(System.getProperty("java.home") + sep + "conf" + sep +
                         "security" + sep + filename);
     }
 
     /**
      * Looks up providers, and returns the property (and its associated