Mikolaj Rydzewski wrote:
André Warnier wrote:
chown root/root /bin/ps
chmod 700 /bin/ps
User can build his own ps binary.
Security by obscurity is not a good way to go.
I was just kidding. ;-)
I'd still like to make it work though.
It looks like such a nice way to solve the problem, apart f
André Warnier wrote:
chown root/root /bin/ps
chmod 700 /bin/ps
User can build his own ps binary.
Security by obscurity is not a good way to go.
--
Mikolaj Rydzewski
-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.
Mikolaj Rydzewski wrote:
André Warnier wrote:
start)
su - tomcatuser -c "/var/lib/jvm/java $CONFIDENTIAL_SETTINGS -jar
"
All of your 'confidential settings' will be visible to all users with
one command:
ps aux
Ooops.
chown root/root /bin/ps
chmod 700 /bin/ps
Damn! it sounded so
How about md5sum?
Rgds
Gregor
--
just because your paranoid, doesn't mean they're not after you...
gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
-
To unsubscribe, e-mail:
André Warnier wrote:
start)
su - tomcatuser -c "/var/lib/jvm/java $CONFIDENTIAL_SETTINGS -jar
"
All of your 'confidential settings' will be visible to all users with
one command:
ps aux
There're ways to restrict such listing to only your processes. But
anyway, command line arguments
Bill Barker wrote:
This is totally Tomcat specific, so won't necessarily port if you decide to
change containers (but without looking probably still works for GlassFish
and JBoss). Tomcat does Ant style variable replacement when parsing web.xml
(both the one in conf and the one in WEB-INF).
André Warnier wrote:
In addition, it would avoid having to put some potentially sensible
values in a web-xml file which has to be readable by the Tomcat user.
Also some other, than web.xml, file with sensible values has to readable
by Tomcat user ;-)
--
Mikolaj Rydzewski
---
Bill Barker wrote:
"André Warnier" wrote in message
news:498ad66a.4080...@ice-sa.com...
Mikolaj Rydzewski wrote:
André Warnier wrote:
if I have a webapp consistig of just a couple of classes and a
WEB-INF/web.xml config file, but this web.xml file contains some
parameters that are "each-clie
Of course it will; no doubts about it! Any self-respecting maven fanatic can assure you of that!!
;-)
epicwin...@hotmail.com wrote:
Thanks for all the replies. Nice to know i can do this without any side
effects.
I think I will have to look into maven and see if that fits my deployment need
"André Warnier" wrote in message
news:498ad66a.4080...@ice-sa.com...
> Mikolaj Rydzewski wrote:
>> André Warnier wrote:
>>> if I have a webapp consistig of just a couple of classes and a
>>> WEB-INF/web.xml config file, but this web.xml file contains some
>>> parameters that are "each-client-d
Thanks for all the replies. Nice to know i can do this without any side
effects. I think I will have to look into maven and see if that fits my
deployment needs.
_
Windows Live™: E-mail. Chat. Share. Get more ways to connect.
h
epicwin...@hotmail.com wrote:
> Is there any advantage why I should not just jar all my class files and put
> them in WEB-INF/lib rather than exploding the jar file to the classes
> directory?
>
>
> I like developing with the classes and I understand it is nice to let tomcat
> deploy a .war fil
Mikolaj Rydzewski wrote:
André Warnier wrote:
if I have a webapp consistig of just a couple of classes and a
WEB-INF/web.xml config file, but this web.xml file contains some
parameters that are "each-client-dependent", and some customers are
insisting to receive the updates as a war file, how
André Warnier wrote:
if I have a webapp consistig of just a couple of classes and a
WEB-INF/web.xml config file, but this web.xml file contains some
parameters that are "each-client-dependent", and some customers are
insisting to receive the updates as a war file, how can I achieve that ?
Som
Bill Barker wrote:
ignoring the maven fanatics, Tomcat's classloader searches the
WEB-INF/classes directory before the WEB-INF/lib/*.jar. This means that it
is sometimes nice to use WEB-INF/classes for a development server. But for
a production server you won't see much difference.
Sorry t
ignoring the maven fanatics, Tomcat's classloader searches the
WEB-INF/classes directory before the WEB-INF/lib/*.jar. This means that it
is sometimes nice to use WEB-INF/classes for a development server. But for
a production server you won't see much difference.
wrote in message
news:blu1
epicwin...@hotmail.com wrote:
Is there any advantage why I should not just jar all my class files and put
them in WEB-INF/lib rather than exploding the jar file to the classes directory?
I like developing with the classes and I understand it is nice to let tomcat
deploy a .war file but it als
If you build your war files with maven you can use maven's profiles and have it
build war files that contain settings tailored for each server.
http://www.sonatype.com/books/maven-book/
http://www.exist.com/better-build-maven
epicwin...@hotmail.com wrote:
Is there any advantage why I should n
Is there any advantage why I should not just jar all my class files and put
them in WEB-INF/lib rather than exploding the jar file to the classes directory?
I like developing with the classes and I understand it is nice to let tomcat
deploy a .war file but it also creates some problems for me
19 matches
Mail list logo
