Good day. After putting this off for too long, I finally got around to experimenting with chroot'ing Tomcat. My travails may help someone going through the same process
http://www.petrovic.org/blog/?p=126 Same story for finally deploying the J. Brittain BadInputFilterValve under Tomcat 5.5.12 http://www.petrovic.org/blog/?p=137 -- Mark