Has any one submitted a request to get dropping privs into the JDK? Or escalating privs to grab one of these ports and then dropping them again?
As I see this request over and over again on this list I think there is a large number of people who would like to see it or would vote for it in the java bug parade. It also seems rather important for running a secure service to manage the privs. I know I could use a security manager/policy to restrict what can happen, but this doesn't restrict native libraries loaded into the process and requires more work on our part then just allowing the JDK to loose its privs... -gabe -----Original Message----- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 12:58 PM To: Tomcat Users List Subject: RE: Running Tomcat as Non-Root Howdy, Are you running on a unix OS? If so, root is normally required if you want to run on a port < 1024. There are workarounds, but they vary in complexity and portability, and none are that good at this point. If you're running on a port higher than 1024, than you don't need to run as root at all. Yoav Shapira Millennium ChemInformatics >-----Original Message----- >From: Latesha Williams [mailto:[EMAIL PROTECTED] >Sent: Friday, July 18, 2003 3:55 PM >To: Tomcat Users List >Subject: Running Tomcat as Non-Root > >Is it possible to run Tomcat as a non-root user, with root as the owner of >the entire Tomcat directory structure and grant file/directory permissions >to the non-root account? Please advise. > > > > >--------------------------------------------------------------------- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
