You can always make the directory read/write only for tomcat. (600)

-Tim

Jason Keltz wrote:

Hi Yoav,

I have the server running as user "tomcat" and the "tomcat-users.xml" file
is owned by user "tomcat".  If the file is made readable by everyone on
the system, it seems to defeat the purpose of the security in the first
place. :)

Jason.

On Thu, 4 Mar 2004, Shapira, Yoav wrote:


Hi,
The tomcat server needs to be able to write this file, because the admin
webapp allows for modifications which must be persisted to this file.
If you're not using a Realm based on this file, don't declare one in
server.xml.

Yoav Shapira
Millennium ChemInformatics



-----Original Message-----
From: Jason Keltz [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 04, 2004 11:06 AM
To: Tomcat Users List
Subject: permission on tomcat-users.xml file

Hi.

If I set the permissions on the tomcat-users.xml file so that only the
tomcat user can read the file, I notice that after starting the server,
the permissions change from mode 600 to 644!  Why would this happen,

and


how can I prevent this from happening?



--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to