You are probably running JRun as root. YOu need to create a jrun user and
run the JRun application as that user
read up on su command, there is a way to run a command as a particular user.
-----Original Message-----
From: Joseph Delaney [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 19, 2001 12:17 PM
To: JRun-Talk
Subject: security question
We are trying to use JRun to create files on the server, and in
conjunction with JSPSmartUpload, upload files.
In both cases, the files end up with the file owner and group ends up
as "root" . This seems like a security problem to me, and I was
wondering how to limit or set the owner and group of a file created
using JSP.
Apart from the security concern, it's also annoying since if we try
to alter those files in any other way (ftp, telnet, etc) we have to
start changing permissions.
--
Joseph Delaney
--------------
Teaching Excellence Center
Rutgers University
(732) 932-7466
<http://TeachX.rutgers.edu/>
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists