> I suggest the file be chmodded to 600 during installation. I should note this file gets recreated during start-up. The restricted folder solution is simpler than patching tomcat. If a world readable tomcat-users.xml isn't acceptable, you could try a user not writable folder. That would issue a warning about database persistence but won't override file permissions.
By the way, dpkg will keep asking about modifications. I feel tomcat-users.xml should be included as an example, not as an actual configuration file. _______________________________________________ pkg-java-maintainers mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers

