OK to run tomcat as nobody?

2002-12-06 Thread Sanjaya Singharage
This is a follow up to the post why run romcat as root (I meant to say why run tomcat as nobody). After reading all the replies. My solution would be to run apache as root on port 80 and then run tomcat behind the scenes using a connector and running a user other than root. What I want to know is

Why run tomcat as root

2002-12-05 Thread Sanjaya Singharage
with respect to security what is the best way to run tomcat on linux? I am running tomcat3.2.3 with apache1.3.26 and mod_jk 1. Run as root? 2. Run as nobody? 3.Run as other user (eg. tomcat)? why is running tomcat as a certain user more secure than running it as others? If this is the appropriate