> I suggest the file be chmodded to 600 during installation.

I should note this file gets recreated during start-up. The restricted
folder solution is simpler than patching tomcat. If a world readable
tomcat-users.xml isn't acceptable, you could try a user not writable
folder. That would issue a warning about database persistence but won't
override file permissions.

By the way, dpkg will keep asking about modifications. I feel
tomcat-users.xml should be included as an example, not as an actual
configuration file.




_______________________________________________
pkg-java-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers

Reply via email to