At 7:01 PM -0500 9/9/98, Chris Wertman wrote:
>Look hee I am discussing security .....sheeze.....Anyway not being that
>familiar
>with Java in a personal form , does Java have safegaurds to address the
>different
>types of security problems that will be found on both platforms..?

Heh, heh!!  Jee, I dunno.  I think Java itself isn't the problem, but the
same kinds of issues as if you had a program running on the server that had
write access to the server config and startup files...  SUID issues, etc.
I maintain that having an ACL mechanism (use htpasswd even - we use
htpasswd-generated files for authentication of a number of things on our
server) is probably sufficient for most users.  Make it work first.

(OK, everybody who's got their httpd.conf or whatever editable by
themselves, or members of a group containing the web server user, raise
your hand - don't be bashful!!)
GEB
Gary E. Bickford, [EMAIL PROTECTED]
Sr. Systems Administrator, Connect Schlumberger http://www.connect.slb.com

Reply via email to