> No, you're right.  You can make Apache listen on port 80 while running
> as root because it'll change the process' ownership when it opens a
> new
> connection. There is no portable way of doing this in Java; therefore,

Hey! And they call it an advanced language?

> you have to run Tomcat as root if you want to make it listen on port
> 80.
> Of course, that's a major security hole.

Not only, it also masks some bugs (like the JITC one for exemple).

> I always front-end TC with Apache and use mod_proxy to achieve what
> you're doing with iptables.

Well, let me find iptables less resources consuming :).

Fran�ois.

P.S.: One or two trolls are hiding in this message, please do NOT feed!


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to