Regarding (b), even if you run the server as root, you can change the owners &/or groups of the files so that non-root users can change them.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Haim (Howard) Roman Computer Center, Jerusalem College of Technology [EMAIL PROTECTED] Phone: 052-8-592-599 (6022 from within Machon Lev) -------- Original Message -------- Subject: Sun Application Server Drop Privs From: Crist J. Clark <[EMAIL PROTECTED]> To: [email protected] Date: Tue 24 Apr 2007 03:11:02 AM IDT > We're using Sun Java System Application Server 8.1. I know > the software is designed so it can be run as a non-root user, > but right now, we have to run it as root since it binds to ports > 80/tcp and 443/tcp. > > I've hit SunSolve, docs.sun.com, and Google, but can't seem to > find out how to get it to drop privs to a non-root user after > grabbing the low-numbered ports. Anyone know how to do this? > I'd rather (a) not have this monster run as root if it doesn't > have to and (b) not have the web app developers have to get a > sys admin to make changes as root for them whenever they want > to tweak some file. >
