Re: running tomcat with root user.....umask in jsvc?

2009-02-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, I know I'm a bit late, but... André Warnier wrote: > André Warnier wrote: >> epicwin...@hotmail.com wrote: >>> You are correct, I found a setting that relaxes the group access >>> permissions on the jailkit. Now I just have one more problem.

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread Rusty Wright
-sa.com To: users@tomcat.apache.org Subject: Re: running tomcat with root user.umask in jsvc? epicwin...@hotmail.com wrote: That is a possible solution. There is a fairly heavy amount of files uploaded from many different users so it would mean a lot of configuration and a lot of maintenance to

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
> Date: Tue, 3 Feb 2009 00:10:30 +0100 > From: a...@ice-sa.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user.umask in jsvc? > > epicwin...@hotmail.com wrote: > [...] > I'm not a great security specialist, but your setup looks indeed

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
epicwin...@hotmail.com wrote: [...] I'm not a great security specialist, but your setup looks indeed safe enough, if the users are chrooted to their home directories. I can't imagine how they could break out and access things they shouldn't. Just one more question : how do you arrange to know w

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
> Date: Mon, 2 Feb 2009 22:00:24 +0100 > From: a...@ice-sa.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user.umask in jsvc? > > epicwin...@hotmail.com wrote: > > That is a possible solution. There is a fairly heavy amount of files

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
epicwin...@hotmail.com wrote: That is a possible solution. There is a fairly heavy amount of files uploaded from many different users so it would mean a lot of configuration and a lot of maintenance to that config as i add new users. So I am trying to avoid the operating system chmod commands in

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
Re: running tomcat with root user.umask in jsvc? > > André Warnier wrote: > > epicwin...@hotmail.com wrote: > >> You are correct, I found a setting that relaxes the group access > >> permissions on the jailkit. > >> Now I just have one more problem. When tom

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
André Warnier wrote: epicwin...@hotmail.com wrote: You are correct, I found a setting that relaxes the group access permissions on the jailkit. Now I just have one more problem. When tomcat creates files in these user directories I need the permissions to be set appropriately. What is the b

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
epicwin...@hotmail.com wrote: You are correct, I found a setting that relaxes the group access permissions on the jailkit. Now I just have one more problem. When tomcat creates files in these user directories I need the permissions to be set appropriately. What is the best way to set the u

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
tomcat using jsvc? > Date: Sun, 1 Feb 2009 21:58:11 -0800 > From: rusty.wri...@gmail.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user > > Are you sure about the group write permissions? I glanced at the jailkit web > page and it looks like it'

Re: running tomcat with root user

2009-02-01 Thread Rusty Wright
Are you sure about the group write permissions? I glanced at the jailkit web page and it looks like it's sugar coating and chrome around a chroot. So I would think that using unix groups would work. And on the flip side, if unix groups don't work, it seems to me that ACLs wouldn't either.

Re: running tomcat with root user

2009-02-01 Thread André Warnier
epicwin...@hotmail.com wrote: Thanks for the reply and suggestion , i am doing some heavy reading right now on ACLs. Very interesting, looks like a possible solution. I am doing this on a remote server with one drive so I am a little nervous about making these changes and seeing if it comes

RE: running tomcat with root user

2009-02-01 Thread epicwin...@hotmail.com
> From: peter.crowt...@melandra.com > To: users@tomcat.apache.org > Date: Sun, 1 Feb 2009 12:59:33 + > Subject: RE: running tomcat with root user > > > From: epicwin...@hotmail.com [mailto:epicwin...@hotmail.com] > > I have the latest tomcat 6 installed under cen

RE: running tomcat with root user

2009-02-01 Thread epicwin...@hotmail.com
> Date: Sun, 1 Feb 2009 11:04:10 +0100 > From: a...@ice-sa.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user > > epicwin...@hotmail.com wrote: > > I have the latest tomcat 6 installed under centos 5.2. The problem I am > > having is

RE: running tomcat with root user

2009-02-01 Thread Peter Crowther
> From: Brian Millett [mailto:bmill...@gmail.com] > On Sat, 2009-01-31 at 19:25 -0800, epicwin...@hotmail.com wrote: > > I have the latest tomcat 6 installed under centos 5.2. The > problem I am having is that it appears that I have to run > tomcat as root user, because the spring app that tomcat

Re: running tomcat with root user

2009-02-01 Thread Brian Millett
On Sat, 2009-01-31 at 19:25 -0800, epicwin...@hotmail.com wrote: > I have the latest tomcat 6 installed under centos 5.2. The problem I am > having is that it appears that I have to run tomcat as root user, because the > spring app that tomcat starts needs to write files to other users' home >

RE: running tomcat with root user

2009-02-01 Thread Peter Crowther
> From: epicwin...@hotmail.com [mailto:epicwin...@hotmail.com] > I have the latest tomcat 6 installed under centos 5.2. The > problem I am having is that it appears that I have to run > tomcat as root user, because the spring app that tomcat > starts needs to write files to other users' home direc

Re: running tomcat with root user

2009-02-01 Thread André Warnier
epicwin...@hotmail.com wrote: I have the latest tomcat 6 installed under centos 5.2. The problem I am having is that it appears that I have to run tomcat as root user, because the spring app that tomcat starts needs to write files to other users' home directories. The tomcat user doesn't hav