tomcat6-admin should ship its own policy file in /etc/tomcat6/policy.d,
something like:

grant codeBase "file:/usr/share/tomcat6-admin/manager/-" {
  permission java.lang.RuntimePermission 
"accessClassInPackage.org.apache.catalina";
  permission java.lang.RuntimePermission 
"accessClassInPackage.org.apache.catalina.manager";
  permission java.lang.RuntimePermission 
"accessClassInPackage.org.apache.catalina.manager.util";
};

Let's see if getting rid of the securitymanager altogether is not a
smarter move.

-- 
Security manager breaks session listing
https://bugs.launchpad.net/bugs/509528
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to