On Monday, November 7, 2016 at 2:16:06 PM UTC-5, [email protected] wrote: > > thanks for your reply > > in my system tomcat run under user tomcat8. i have not changed this. > i set the dspace's installation directory owner to user tomcat8. (Chown > -R tomcat8:tomcat8 /opt/dspace) > i afraid for security problems: the database's password is present in > dspace.cfg file > what are the rights permssions that should be set for dspace's > configuration directory. >
You must trust your Servlet container (Tomcat): it is the process that runs DSpace, and thus it must have access to DSpace's configuration. No other user needs any access, so config/dspace.cfg's mode can be 400 or 600 if you wish. The DSpace configuration is outside of any webapp. directory tree and should not be visible, or even addressable, through Tomcat. -- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/dspace-tech. For more options, visit https://groups.google.com/d/optout.
