On 06/05/2011 08:41, Mikolaj Rydzewski wrote:
> On Fri, 6 May 2011 02:35:17 +0200, Jakub Królikowski wrote:
> 
>>> My $0.02: do not run tomcat as root.
>>
>> Why?
> 
> For security purposes. One should run processes/services with lowest
> privileges possible.

+1

> Is there any reason you have to run it as root? If so, implement a
> lightweight daemon that will run with root priviliges and run tomcat as
> a normal user.

That would be jsvc, part of the commons daemon project.

Mark




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to