-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dmitry,
On 5/7/2009 3:07 PM, Dmitry Beransky wrote: > I want to lock down the core Tomcat installation by making it > read-only (and updateable only through a SCM). I've figured out how > to relocate temp, work, logs, webapps directories, all of which get > modified as part of Tomcat's standard operation. The last directory > left inside the core that gets modified at runtime is conf/Catalina > and I can't find a way to relocate it elsewhere. Is this even > possible? Not sure if you can re-locate this, but have you considered giving read-only access to that directory for the Tomcat euid and allowing only admins to write? That seems more straightforward than re-locating everything. Note that relocating everything means that when posting your users post questions to this mailing list we're likely to say "who's the idiot that scattered all the directories all over the place? try downloading a fresh version of Tomcat and see if all your problems go away?". - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkoInKYACgkQ9CaO5/Lv0PB7DwCdHJoHw4+BrthF42NOGLO0Wl/D c6oAnj0ttZlH+kGxl5xaN39PQKphQMwJ =L7Uw -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
