On Fri, 2002-09-06 at 14:40, Shapira, Yoav wrote:
Hi,
How about not letting any regular user execute bin/shutdown.sh? ;) ;) ;)
Nope, it's not the solution.
Anyone can download tomcat, extract shutdown.sh and execute.
Shutdown connects to Tomcat through a socket, so it's even possible
across
On Fri, 2002-09-06 at 21:04, Turner, John wrote:
Very interesting. I hadn't investigated this scenario until now. I like
your suggestion.
Even more, I've checked what exactly goes there, and you can stop
default Tomcat installation by simply telneting localhost 8005 and
typing SHUTDOW from
Hello !
I've just installed Tomcat, and discovered, that any regular user can stop
Tomcat with bin/shutdown.sh. How can I protect Tomcat from this ?
P.Wegrzyn
--
To unsubscribe, e-mail: mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]
