Re: How use an external C program in a Servlet
Thanks for this advice ! Michel - Original Message - From: Holger Klawitter [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, June 24, 2003 11:46 AM Subject: Re: How use an external C program in a Servlet Am Dienstag, 24. Juni 2003 11:13 schrieb Michel Jubault: Thanks, I try it straight away ! What kind of problem could occur with security ? It depends on your situation. If any user may upload servlets, these servlets may execute every program on that machine - with the rights of the tomcat account, which might be root! Same problem if the arguments to the C program are not sufficiently checked. Mit freundlichem Gruß / With kind regards Holger Klawitter -- [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: How use an external C program in a Servlet
Am Dienstag, 24. Juni 2003 09:51 schrieb Michel Jubault: Hi there !! I've a little C program. This computes some variables and return a kind of statistic result. I need it in a servlet. But I don't know how to call it. I'm using Tomcat 4.1.24. Where this program must be to be launched ? How can I pass arguments to C program and use in servlet the return value ? The normal java contains the solution: http://java.sun.com/j2se/1.4.1/docs/api/java/lang/Runtime.html#exec(java.lang.String[]) However, this imposes a lot of security concerns. You will probably have to dig into $TOMCAT_HOME/conf/catalina.policy. Mit freundlichem Gruß / With kind regards Holger Klawitter -- [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: How use an external C program in a Servlet
Thanks, I try it straight away ! What kind of problem could occur with security ? Regards Michel - Original Message - From: Holger Klawitter [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, June 24, 2003 10:53 AM Subject: Re: How use an external C program in a Servlet Am Dienstag, 24. Juni 2003 09:51 schrieb Michel Jubault: Hi there !! I've a little C program. This computes some variables and return a kind of statistic result. I need it in a servlet. But I don't know how to call it. I'm using Tomcat 4.1.24. Where this program must be to be launched ? How can I pass arguments to C program and use in servlet the return value ? The normal java contains the solution: http://java.sun.com/j2se/1.4.1/docs/api/java/lang/Runtime.html#exec(java.lan g.String[]) However, this imposes a lot of security concerns. You will probably have to dig into $TOMCAT_HOME/conf/catalina.policy. Mit freundlichem Gruß / With kind regards Holger Klawitter -- [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: How use an external C program in a Servlet
Am Dienstag, 24. Juni 2003 11:13 schrieb Michel Jubault: Thanks, I try it straight away ! What kind of problem could occur with security ? It depends on your situation. If any user may upload servlets, these servlets may execute every program on that machine - with the rights of the tomcat account, which might be root! Same problem if the arguments to the C program are not sufficiently checked. Mit freundlichem Gruß / With kind regards Holger Klawitter -- [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: How use an external C program in a Servlet
Why don't you wrap a Java interface around the C program? Regards Jim. -Original Message- From: Michel Jubault [mailto:[EMAIL PROTECTED] Sent: 24 June 2003 10:14 To: Tomcat Users List Subject: Re: How use an external C program in a Servlet Thanks, I try it straight away ! What kind of problem could occur with security ? Regards Michel - Original Message - From: Holger Klawitter [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, June 24, 2003 10:53 AM Subject: Re: How use an external C program in a Servlet Am Dienstag, 24. Juni 2003 09:51 schrieb Michel Jubault: Hi there !! I've a little C program. This computes some variables and return a kind of statistic result. I need it in a servlet. But I don't know how to call it. I'm using Tomcat 4.1.24. Where this program must be to be launched ? How can I pass arguments to C program and use in servlet the return value ? The normal java contains the solution: http://java.sun.com/j2se/1.4.1/docs/api/java/lang/Runtime.html#exec(java.lan g.String[]) However, this imposes a lot of security concerns. You will probably have to dig into $TOMCAT_HOME/conf/catalina.policy. Mit freundlichem Gruß / With kind regards Holger Klawitter -- [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] PLEASE READ: The information contained in this email is confidential and intended for the named recipient(s) only. If you are not an intended recipient of this email you must not copy, distribute or take any further action in reliance on it and you should delete it and notify the sender immediately. Email is not a secure method of communication and Nomura International plc cannot accept responsibility for the accuracy or completeness of this message or any attachment(s). Please examine this email for virus infection, for which Nomura International plc accepts no responsibility. If verification of this email is sought then please request a hard copy. Unless otherwise stated any views or opinions presented are solely those of the author and do not represent those of Nomura International plc. This email is intended for informational purposes only and is not a solicitation or offer to buy or sell securities or related financial instruments. Nomura International plc is regulated by the Financial Services Authority and is a member of the London Stock Exchange. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: How use an external C program in a Servlet
Hi Holger, There are two things that you can do. If your programme is a Library then you can use JNI to create native wrappers then just call them from the servlet. This is pretty straightforward and I use them. The other is to use: Runtime.getRuntime().exec(exec_name_and_params); That will just execute a programme, you can get the Process object and get it's InputStream and OutputStream. Good Luck, _ Atreya Basu Developer, Greenfield Research Inc. e-mail: atreya (at) greenfieldresearch (dot) ca -Original Message- From: Holger Klawitter [mailto:[EMAIL PROTECTED] Sent: June 24, 2003 6:46 AM To: Tomcat Users List Subject: Re: How use an external C program in a Servlet Am Dienstag, 24. Juni 2003 11:13 schrieb Michel Jubault: Thanks, I try it straight away ! What kind of problem could occur with security ? It depends on your situation. If any user may upload servlets, these servlets may execute every program on that machine - with the rights of the tomcat account, which might be root! Same problem if the arguments to the C program are not sufficiently checked. Mit freundlichem Gruß / With kind regards Holger Klawitter -- [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]