Caldarale, Charles R wrote:

...  Note that you cannot
manually edit tomcat-users.xml while Tomcat is running, since Tomcat
rewrites it at some point (probably at termination, but I haven't
verified that).

Does anyone else find that 5.5.9 rewrites it with these
permissions under Linux?

-rw-rw-r--  1 tomcat tomcat   439 Oct  2 20:01 tomcat-users.xml

Since it contains a plaintext password this is a security
risk.

Paul Singleton


--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.12.4/143 - Release Date: 19/Oct/2005


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to