-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chris,

On 11/20/2014 12:11 PM, Christopher Schultz wrote:
> Léa,
> 
> On 11/20/14 1:21 PM, Léa Massiot wrote:
>> Thank you for your answers.
> 
>> @MarkEggers Thank you very much for sharing.
> 
>>> Christopher Schultz wrote There are reasons to use jsvc, but
>>> the ability to run as a non-root uses is not one of them.
> 
>> What are these reasons according to you (apart from running
>> Tomcat as a daemon on Unix which was also one of my goals at the
>> time)?
> 
> Several I can think of without spending too much time:
> 
> 1. (by a large margin) Allows access to ports < 1024

This is not required. Use either su -c or runuser -c (if using
SELinux) to access ports < 1024.

> 2. Automatic re-start of JVM process if the JVM exits

This is nice, especially for misbehaving web applications that cannot
(or will not) be fixed.

> 3. Control JVM process by sending signal to parent process

This is also nice, but reasonably written init scripts will do most of
what is needed.

> 4. Enable rotation of stdout/stderr files

Without restarting, this is nice. There are several hacks you can do
with logrotate that are useful, but they all have drawbacks.

> 
>> Also Excerpt from here: 
>> http://tomcat.apache.org/tomcat-7.0-doc/setup.html#Unix_daemon 
>> "jsvc has other useful parameters, such as -user which causes it
>> to switch to another user after the daemon initialization is
>> complete. This allows, for example, running Tomcat as a non
>> privileged user while still being able to use privileged ports."
> 
> This is just a note about additional features, certainly not the 
> primary feature of jsvc.
> 
> -chris

. . . just my two cents
/mde/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJUblihAAoJEEFGbsYNeTwtQBMH/2fONQ2DF5PuZUtSihPwJEtG
GUov/q7jlsG4Ou5PG25czuL8s69eDPzpNX3BO3mrk5pIUb54UveJVz4ht8Xqq0B9
/1G9NWBb1Yx6lHDrXRdERACfxdQgpE4GuzJ8Uc0ZsLq+QMcdyBMXLYFrP3EPFXhn
bdiIL5VjsGXUhMWdmM2qaTfgXdMSCXsY5CWV80mk3Gi6KY1owv4EB69LMymXXYC3
+yz1PR3qujioMF72wNMF16Pk1VXcoaUSknt3+Gqgcp7UdNnqP1o8mmiARls/ij5F
F/KMlLPp3hpuLS/qVpr1kui/9G8bGzxzvdga1k9AY8AH1a1AhIOnK5W6PtGcBTU=
=Trk/
-----END PGP SIGNATURE-----

---
This email is free from viruses and malware because avast! Antivirus protection 
is active.
http://www.avast.com


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to