Point taken LOL :)  

Well I bought Real World Linux Security by Toxen (Open Source Tech Series)
and The RedHat 7.3 Bible, which I am finding isn't that much different than
the documentation that came from the software.  Barnes & Noble store had a
crappy selection - need to look online for a full fledge "system
administration" book.  The security book is pretty good (for what I have
glanced at so far) - its most up to date I saw too. But my oh my is there a
lot to be learned!! :)

Denise 


-----Original Message-----
From: Turner, John [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 18, 2002 1:16 PM
To: 'Tomcat Users List'
Subject: RE: [OFF-TOPIC] RE: Na�ve question about root



Perfect example why you shouldn't stay logged in as root, and should only be
root when necessary.  LOL

John


> -----Original Message-----
> From: Turner, John [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, December 18, 2002 1:15 PM
> To: 'Tomcat Users List'
> Subject: RE: [OFF-TOPIC] RE: Na�ve question about root
> 
> 
> 
> Ooops, typing too fast.  That should be "chown", not "chmod".
> 
> John
> 
> > -----Original Message-----
> > From: Turner, John [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, December 18, 2002 1:14 PM
> > To: 'Tomcat Users List'
> > Subject: RE: [OFF-TOPIC] RE: Na�ve question about root
> > 
> > 
> > 
> > Good point, you are probably right on the PPID thing, I
> > hadn't considered
> > that scenario.
> > 
> > I usually set my tomcat permissions like this:
> > 
> > chmod -R tomcat:tomcat $CATALINA_HOME
> > 
> > If possible, you want to use deploy tools to deploy your app,
> > then you don't
> > have developers logging into the server and editing files 
> > directly, this
> > makes handling users, groups, and permissions much easier.  
> > You have to
> > decide where the tradeoff is...increased security vs. decreased
> > administration and flexibility and vice versa.
> > 
> > So, what books did you buy?  LOL ;)
> > 
> > John
> > 
> > > -----Original Message-----
> > > From: Denise Mangano [mailto:[EMAIL PROTECTED]]
> > > Sent: Wednesday, December 18, 2002 1:07 PM
> > > To: 'Tomcat Users List'
> > > Subject: RE: [OFF-TOPIC] RE: Na�ve question about root
> > > 
> > > 
> > > John -
> > > 
> > > Have you ever been, or thought of being a professor? ; )
> > > Actually, I don't
> > > think Tomcat was running at boot because after I rebooted the 
> > > server I could
> > > not access the index page through my website:8080.  
> > > 
> > > I think I see my mistake.  What I did was I created a group
> > > tomcat and a
> > > user tomcat under that group, and I added myself to that 
> > > group and made
> > > myself owner of just the webapps directory.  I kept owner 
> > of the other
> > > directories such as bin as owned by root.  So when I went to
> > > start Tomcat as
> > > myself, it gave me a permission denied.  So I used the "su -" 
> > > command and
> > > started it as root.  I am going to change owner of the 
> entire tomcat
> > > directory to myself.  And I will give user tomcat
> executable rights.
> > > 
> > > After starting Tomcat manually I was able to see
> > > mywebsite:8080/index.jsp.
> > > Maybe the PPID of the first java process is 1 only because I 
> > > started it as
> > > root (looking at the file it seems all processes that were 
> > > started as root
> > > have a PPID of 1)...
> > > 
> > > Thanks :)
> > > 
> > > Denise Mangano
> > > Help Desk Analyst
> > > Complus Data Innovations, Inc.
> > > 
> > 
> > --
> > To unsubscribe, e-mail:   
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail: 
> <mailto:[EMAIL PROTECTED]>
> 
> --
> To unsubscribe, e-mail:   
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to