The fix was introduced in Tomcat 4.1.13.

aps olute wrote:

Am curious as to why the double entry of permission
java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util"; ?

Actually, that's a very good question. It is not supposed to make a difference. I will try to find why both were added.


Also I have a stock binary download 4.1.12 and does not have this under
"//Required for servlet and JSP's " and should I include it? permission java.lang.RuntimePermission "defineClassInPackage.org.apache.catalina.util.*";

If one of the class under util.* has an inner class that is created at runtime, that permission is required. From the J2SE documentation:

"Definition of classes in the specified package, via a class loader's |defineClass| method when that class loader calls the SecurityManager |checkPackageDefinition| method."

-- Jeanfrancois


aps


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>



Reply via email to