tomcat6-admin should ship its own policy file in /etc/tomcat6/policy.d,
something like:

grant codeBase "file:/usr/share/tomcat6-admin/manager/-" {
  permission java.lang.RuntimePermission 
"accessClassInPackage.org.apache.catalina";
  permission java.lang.RuntimePermission 
"accessClassInPackage.org.apache.catalina.manager";
  permission java.lang.RuntimePermission 
"accessClassInPackage.org.apache.catalina.manager.util";
};

Let's see if getting rid of the securitymanager altogether is not a
smarter move.

-- 
Security manager breaks session listing
https://bugs.launchpad.net/bugs/509528
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to tomcat6 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to