Hi

> But if you run tomcat standalone, you have to run tomcat as root.

NO.
There are ways to run tomcat using jsvc and others.
Search the archive - I haven't done so myself yet.

> Apache does not run as root, so if you run Apache in front of tomcat, you
can avoid exposing the root account.

And opening a lot of other possible security issues.

Regards,
  Steffen

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to