Re: running tomcat with root user.....umask in jsvc?

2009-02-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, I know I'm a bit late, but... André Warnier wrote: > André Warnier wrote: >> epicwin...@hotmail.com wrote: >>> You are correct, I found a setting that relaxes the group access >>> permissions on the jailkit. Now I just have one more problem.

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread Rusty Wright
-sa.com To: users@tomcat.apache.org Subject: Re: running tomcat with root user.umask in jsvc? epicwin...@hotmail.com wrote: That is a possible solution. There is a fairly heavy amount of files uploaded from many different users so it would mean a lot of configuration and a lot of maintenance to

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
> Date: Tue, 3 Feb 2009 00:10:30 +0100 > From: a...@ice-sa.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user.umask in jsvc? > > epicwin...@hotmail.com wrote: > [...] > I'm not a great security specialist, but your setup looks indeed

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
epicwin...@hotmail.com wrote: [...] I'm not a great security specialist, but your setup looks indeed safe enough, if the users are chrooted to their home directories. I can't imagine how they could break out and access things they shouldn't. Just one more question : how do you arrange to know w

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
> Date: Mon, 2 Feb 2009 22:00:24 +0100 > From: a...@ice-sa.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user.umask in jsvc? > > epicwin...@hotmail.com wrote: > > That is a possible solution. There is a fairly heavy amount of files

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
epicwin...@hotmail.com wrote: That is a possible solution. There is a fairly heavy amount of files uploaded from many different users so it would mean a lot of configuration and a lot of maintenance to that config as i add new users. So I am trying to avoid the operating system chmod commands in

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
Re: running tomcat with root user.umask in jsvc? > > André Warnier wrote: > > epicwin...@hotmail.com wrote: > >> You are correct, I found a setting that relaxes the group access > >> permissions on the jailkit. > >> Now I just have one more problem. When tom

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
André Warnier wrote: epicwin...@hotmail.com wrote: You are correct, I found a setting that relaxes the group access permissions on the jailkit. Now I just have one more problem. When tomcat creates files in these user directories I need the permissions to be set appropriately. What is the b

Re: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread André Warnier
epicwin...@hotmail.com wrote: You are correct, I found a setting that relaxes the group access permissions on the jailkit. Now I just have one more problem. When tomcat creates files in these user directories I need the permissions to be set appropriately. What is the best way to set the u

RE: running tomcat with root user.....umask in jsvc?

2009-02-02 Thread epicwin...@hotmail.com
tomcat using jsvc? > Date: Sun, 1 Feb 2009 21:58:11 -0800 > From: rusty.wri...@gmail.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user > > Are you sure about the group write permissions? I glanced at the jailkit web > page and it looks like it'

Re: running tomcat with root user

2009-02-01 Thread Rusty Wright
Are you sure about the group write permissions? I glanced at the jailkit web page and it looks like it's sugar coating and chrome around a chroot. So I would think that using unix groups would work. And on the flip side, if unix groups don't work, it seems to me that ACLs wouldn't either.

Re: running tomcat with root user

2009-02-01 Thread André Warnier
epicwin...@hotmail.com wrote: Thanks for the reply and suggestion , i am doing some heavy reading right now on ACLs. Very interesting, looks like a possible solution. I am doing this on a remote server with one drive so I am a little nervous about making these changes and seeing if it comes

RE: running tomcat with root user

2009-02-01 Thread epicwin...@hotmail.com
> From: peter.crowt...@melandra.com > To: users@tomcat.apache.org > Date: Sun, 1 Feb 2009 12:59:33 + > Subject: RE: running tomcat with root user > > > From: epicwin...@hotmail.com [mailto:epicwin...@hotmail.com] > > I have the latest tomcat 6 installed under cen

RE: running tomcat with root user

2009-02-01 Thread epicwin...@hotmail.com
> Date: Sun, 1 Feb 2009 11:04:10 +0100 > From: a...@ice-sa.com > To: users@tomcat.apache.org > Subject: Re: running tomcat with root user > > epicwin...@hotmail.com wrote: > > I have the latest tomcat 6 installed under centos 5.2. The problem I am > > having is

RE: running tomcat with root user

2009-02-01 Thread Peter Crowther
> From: Brian Millett [mailto:bmill...@gmail.com] > On Sat, 2009-01-31 at 19:25 -0800, epicwin...@hotmail.com wrote: > > I have the latest tomcat 6 installed under centos 5.2. The > problem I am having is that it appears that I have to run > tomcat as root user, because the spring app that tomcat

Re: running tomcat with root user

2009-02-01 Thread Brian Millett
On Sat, 2009-01-31 at 19:25 -0800, epicwin...@hotmail.com wrote: > I have the latest tomcat 6 installed under centos 5.2. The problem I am > having is that it appears that I have to run tomcat as root user, because the > spring app that tomcat starts needs to write files to other users' home >

RE: running tomcat with root user

2009-02-01 Thread Peter Crowther
> From: epicwin...@hotmail.com [mailto:epicwin...@hotmail.com] > I have the latest tomcat 6 installed under centos 5.2. The > problem I am having is that it appears that I have to run > tomcat as root user, because the spring app that tomcat > starts needs to write files to other users' home direc

Re: running tomcat with root user

2009-02-01 Thread André Warnier
epicwin...@hotmail.com wrote: I have the latest tomcat 6 installed under centos 5.2. The problem I am having is that it appears that I have to run tomcat as root user, because the spring app that tomcat starts needs to write files to other users' home directories. The tomcat user doesn't hav

running tomcat with root user

2009-01-31 Thread epicwin...@hotmail.com
I have the latest tomcat 6 installed under centos 5.2. The problem I am having is that it appears that I have to run tomcat as root user, because the spring app that tomcat starts needs to write files to other users' home directories. The tomcat user doesn't have access to these directories.