[JBoss-user] Security

[Gerry Duhig]

I have a couple of applications now deployed under the combined JBoss-Tomcat on a Linux system and they is working fine. After a bit of effort, JAAS security is doing everything I want it to. Its good!   Can I ask a broader question about security on the machines generally?   What user account should I be using to run JBoss and are there implications to using root or a less privileged account.   Are there any other issues I should be considering to be certain of a secure system?   Vague questions I know, but I am new to both JBoss and Linux and need to be confident that we are safe.   Gerry