DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15291>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15291

Security Manager Does not work

           Summary: Security Manager Does not work
           Product: Tomcat 4
           Version: 4.0 Beta 4
          Platform: Other
               URL: http://ecom0.site.uottawa.ca/
        OS/Version: Other
            Status: NEW
          Severity: Critical
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


While you admit you did not test running Tomcat with a security manager,
it does not work. In other words, it is not possible to prevent someone
to call System.exit and expect it to be blocked. We are running a server
at the University for graduate students. Well, it would be all great if
they could not sabotage each other's work. Is there a version of Tomcat
where one can specify -secure at the command line and expect this to work
too?

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to