This was discussed in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434762
Though /etc/tomcat5.5 permissions are weird (to say the least),
tomcat-users.xml is not world-readable, since /etc/tomcat5.5 is not
world-readable.
Having the file adm readable is a trade-off. What would changing it to
600 tomcat55:adm exactly bring ?
Note that for tomcat6, when fixing permissions I made a different trade-
off. tomcat-users.xml is 640 root:tomcat6 so that only root can modify
it and only the tomcat6 group can read it.
** Changed in: tomcat5.5 (Ubuntu)
Status: New => Incomplete
--
how about change /etc/tomcat5.5/tomcat-users.xml 's file mode to 600
https://bugs.launchpad.net/bugs/390942
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
--
universe-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/universe-bugs
