André Warnier wrote:
start)
su - tomcatuser -c /var/lib/jvm/java $CONFIDENTIAL_SETTINGS -jar
All of your 'confidential settings' will be visible to all users with
one command:
ps aux
There're ways to restrict such listing to only your processes. But
anyway, command line arguments
How about md5sum?
Rgds
Gregor
--
just because your paranoid, doesn't mean they're not after you...
gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
-
To unsubscribe,
André Warnier wrote:
In addition, it would avoid having to put some potentially sensible
values in a web-xml file which has to be readable by the Tomcat user.
Also some other, than web.xml, file with sensible values has to readable
by Tomcat user ;-)
--
Mikolaj Rydzewski m...@ceti.pl
Bill Barker wrote:
André Warnier a...@ice-sa.com wrote in message
news:498ad66a.4080...@ice-sa.com...
Mikolaj Rydzewski wrote:
André Warnier wrote:
if I have a webapp consistig of just a couple of classes and a
WEB-INF/web.xml config file, but this web.xml file contains some
parameters that
Bill Barker wrote:
This is totally Tomcat specific, so won't necessarily port if you decide to
change containers (but without looking probably still works for GlassFish
and JBoss). Tomcat does Ant style variable replacement when parsing web.xml
(both the one in conf and the one in WEB-INF).
Mikolaj Rydzewski wrote:
André Warnier wrote:
start)
su - tomcatuser -c /var/lib/jvm/java $CONFIDENTIAL_SETTINGS -jar
All of your 'confidential settings' will be visible to all users with
one command:
ps aux
Ooops.
chown root/root /bin/ps
chmod 700 /bin/ps
Damn! it sounded so
André Warnier wrote:
chown root/root /bin/ps
chmod 700 /bin/ps
User can build his own ps binary.
Security by obscurity is not a good way to go.
--
Mikolaj Rydzewski m...@ceti.pl
-
To unsubscribe, e-mail:
Mikolaj Rydzewski wrote:
André Warnier wrote:
chown root/root /bin/ps
chmod 700 /bin/ps
User can build his own ps binary.
Security by obscurity is not a good way to go.
I was just kidding. ;-)
I'd still like to make it work though.
It looks like such a nice way to solve the problem, apart
epicwin...@hotmail.com wrote:
Is there any advantage why I should not just jar all my class files and put
them in WEB-INF/lib rather than exploding the jar file to the classes directory?
I like developing with the classes and I understand it is nice to let tomcat
deploy a .war file but it
ignoring the maven fanatics, Tomcat's classloader searches the
WEB-INF/classes directory before the WEB-INF/lib/*.jar. This means that it
is sometimes nice to use WEB-INF/classes for a development server. But for
a production server you won't see much difference.
epicwin...@hotmail.com
Bill Barker wrote:
ignoring the maven fanatics, Tomcat's classloader searches the
WEB-INF/classes directory before the WEB-INF/lib/*.jar. This means that it
is sometimes nice to use WEB-INF/classes for a development server. But for
a production server you won't see much difference.
Sorry
André Warnier wrote:
if I have a webapp consistig of just a couple of classes and a
WEB-INF/web.xml config file, but this web.xml file contains some
parameters that are each-client-dependent, and some customers are
insisting to receive the updates as a war file, how can I achieve that ?
Mikolaj Rydzewski wrote:
André Warnier wrote:
if I have a webapp consistig of just a couple of classes and a
WEB-INF/web.xml config file, but this web.xml file contains some
parameters that are each-client-dependent, and some customers are
insisting to receive the updates as a war file, how
epicwin...@hotmail.com wrote:
Is there any advantage why I should not just jar all my class files and put
them in WEB-INF/lib rather than exploding the jar file to the classes
directory?
I like developing with the classes and I understand it is nice to let tomcat
deploy a .war file but
Thanks for all the replies. Nice to know i can do this without any side
effects. I think I will have to look into maven and see if that fits my
deployment needs.
_
Windows Live™: E-mail. Chat. Share. Get more ways to connect.
André Warnier a...@ice-sa.com wrote in message
news:498ad66a.4080...@ice-sa.com...
Mikolaj Rydzewski wrote:
André Warnier wrote:
if I have a webapp consistig of just a couple of classes and a
WEB-INF/web.xml config file, but this web.xml file contains some
parameters that are
Of course it will; no doubts about it! Any self-respecting maven fanatic can assure you of that!!
;-)
epicwin...@hotmail.com wrote:
Thanks for all the replies. Nice to know i can do this without any side
effects.
I think I will have to look into maven and see if that fits my deployment
Is there any advantage why I should not just jar all my class files and put
them in WEB-INF/lib rather than exploding the jar file to the classes directory?
I like developing with the classes and I understand it is nice to let tomcat
deploy a .war file but it also creates some problems for me
If you build your war files with maven you can use maven's profiles and have it
build war files that contain settings tailored for each server.
http://www.sonatype.com/books/maven-book/
http://www.exist.com/better-build-maven
epicwin...@hotmail.com wrote:
Is there any advantage why I should
19 matches
Mail list logo
