You are probably running JRun as root.  YOu need to create a jrun user and
run the JRun application as that user

read up on su command, there is a way to run a command as a particular user.

-----Original Message-----
From: Joseph Delaney [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 19, 2001 12:17 PM
To: JRun-Talk
Subject: security question


We are trying to use JRun to create files on the server, and in 
conjunction with JSPSmartUpload, upload files.

In both cases, the files end up with the file owner and group ends up 
as "root" . This seems like a security problem to me, and I was 
wondering how to limit or set the owner and group of a file created 
using JSP.

Apart from the security concern, it's also annoying since if we try 
to alter those files in any other way (ftp, telnet, etc) we have to 
start changing permissions.
-- 
Joseph Delaney
--------------
Teaching Excellence Center
Rutgers University
(732) 932-7466
<http://TeachX.rutgers.edu/>
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to