What I've done for tomcat5 is make tomcat5 the owner of server.xml, then chmod 600.
Note that if you really want this secure, you need to generate a unique shutdown string upon the install (and preferably for upgrades too). Otherwise, you just guess that it's still "SHUTDOWN" and don't need to look at the file anyway :-) Cheers, Adrian -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
