if you're front ending with Apache.. then Apache .htaccess could be configured 
against it..
If you exec those same commands with root access and it works its definitely a 
permission problem with the previous username
Good Point
M-
*********************************************************************
This email message and any files transmitted with it contain confidential
information intended only for the person(s) to whom this email message is
addressed.  If you have received this email message in error, please notify
the sender immediately by telephone or email and destroy the original
message without making a copy.  Thank you.



----- Original Message ----- 
From: "Santosh Puranshettiwar" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <users@tomcat.apache.org>
Sent: Tuesday, September 12, 2006 8:56 AM
Subject: Re: Executing binary from Servlet


> >Specifically its been my experience that if you DONT have Security 
> permissions specifically >configured for that jar then the >classes will 
> not run
> Is it applicable to only to jars or to any webapp deployed in Tomcat as 
> such. I've managed to use exec() successfully on some programs 
> successfully without ever touching the security manager.
> 
> For Mark HB:
> Could it be a ownership/group problem?
> 
> Santosh.
> Martin Gainty wrote:
>> Mark-
>> My experience has been radically different than Davids
>>
>> Specifically its been my experience that if you DONT have Security 
>> permissions specifically configured for that jar then the classes will not 
>> run
>> here is an example from catalina.policy
>>
>> grant codeBase "file:${catalina.home}/bin/bootstrap.jar" 
>> {
>>  permission java.lang.RuntimePermission "getenv.CATALINA_HOME";
>>  permission java.lang.RuntimePermission "setenv.CATALINA_HOME";
>>  permission java.util.PropertyPermission "catalina.home", "read,write";
>>         permission java.security.AllPermission;
>> };
>> You have to run with security manager in order to have the policy read and 
>> interpreted correctly
>>
>> I would suggest you run in debug so you can display what is going on
>> i.e.
>> sh catalina.sh -debug -security
>>   
>>> run org.apache.catalina.startup.Bootstrap
>>>     
>>
>> M-
>> *********************************************************************
>> This email message and any files transmitted with it contain confidential
>> information intended only for the person(s) to whom this email message is
>> addressed.  If you have received this email message in error, please notify
>> the sender immediately by telephone or email and destroy the original
>> message without making a copy.  Thank you.
>>
>>
>>
>> ----- Original Message ----- 
>> From: "Mark HB" <[EMAIL PROTECTED]>
>> To: "Tomcat Users List" <users@tomcat.apache.org>
>> Sent: Tuesday, September 12, 2006 8:27 AM
>> Subject: Re: Executing binary from Servlet
>>
>>
>>   
>>> HI,
>>> It all runs fine as a standalone, and when I print the command that I am 
>>> running using exec to the screen and then run it myself, it works fine.
>>> I had this servlet deployed on another machine, and I never had this 
>>> problem.
>>> It is very odd, as sometimes it works and the executable is executed and 
>>> the results are returned, and other times it returns the same error as 
>>> before.
>>> There doesn't seem to be any pattern as to when they work.
>>> I have changed the policy file, to no affect
>>>
>>> java.io.IOException: java.io.IOException:
>>> /srv/www/tomcat5/base/webapps/simulator/WORK/yqzatmopa343/cimmsim:
>>> cannot execute
>>>       at java.lang.UNIXProcess.(UNIXProcess.java:143)
>>>       at java.lang.Runtime.execInternal(Native Method)
>>>       at java.lang.Runtime.exec(Runtime.java:566)
>>>       at java.lang.Runtime.exec(Runtime.java:428)
>>>       at RunSimulation.run(CimmSimServlet.java:655)
>>>
>>> I am looking into deploying the servlet in the J2EE app server instead 
>>> and seeing if that avoids this problem.
>>> Its all very odd!
>>> Thanks
>>> Mark
>>>
>>> Santosh Puranshettiwar wrote:
>>>     
>>>> I agree with David. This does not seem to be a SecurityManager 
>>>> problem. Does your code run properly as a normal executable program 
>>>> (with main())?
>>>>
>>>> Sameer Acharya wrote:
>>>>       
>>>>> Have you tried adding following to your web app permissions in policy 
>>>>> file
>>>>>
>>>>> permission java.lang.RuntimePermission "java.lang.Runtime";
>>>>>
>>>>> -Sameer
>>>>>
>>>>>
>>>>>
>>>>> Mark HB <[EMAIL PROTECTED]> wrote: Hi,
>>>>>
>>>>> My apologies for the confusion, but my previous claim to have sorted 
>>>>> this problem out is now incorrect. It seems with the upgrade to 
>>>>> 1.5.0, the execution of the external binary does work, --- but only 
>>>>> sometimes?? ---. I can't seem to work out the exact conditions that 
>>>>> it works, and seems to be random.
>>>>>
>>>>>
>>>>> Could someone please indicate what I need to add/change in the 
>>>>> catalina.policy file to allow the execution of external binaries. 
>>>>> I've had a good look at this url and can't seem to find any indicators.
>>>>>
>>>>>  > http://tomcat.apache.org/tomcat-5.0-doc/security-manager-howto.html
>>>>>
>>>>> Cheers
>>>>> Mark
>>>>>
>>>>>
>>>>> -------------------------------------
>>>>>
>>>>> Thanks Enrico,
>>>>>
>>>>> However I seem to have inadvertently solved it. I was updating to the
>>>>> latest release of jre and recompiled the servlet with 1.5.0 and now it
>>>>> works.
>>>>> Previously I was using 1.3.1.
>>>>> So there we go.
>>>>>
>>>>> Cheers
>>>>> Mark
>>>>>
>>>>> Enrico Giurin wrote:
>>>>>  
>>>>>         
>>>>>> Hello,
>>>>>> I guess yours is a problem of security manager of tomcat.
>>>>>> I think you have to modify some entries of the catalina.policy file.
>>>>>> http://tomcat.apache.org/tomcat-5.0-doc/security-manager-howto.html
>>>>>>
>>>>>>
>>>>>> Enrico.
>>>>>>
>>>>>> ----- Original Message ----- From: "Mark HB"
>>>>>> To: Sent: Tuesday, September 12, 2006 10:16 AM
>>>>>> Subject: Executing binary from Servlet
>>>>>>
>>>>>>
>>>>>>    
>>>>>>           
>>>>>>> Hi,
>>>>>>>
>>>>>>> I am looking for some help on a problem I have encountered with
>>>>>>> executing a binary from a servlet using Runtime.getRuntime().exec()
>>>>>>> The code that I have is simply executing a binary called "cimmsim":
>>>>>>>
>>>>>>> File theDir = new File(curdir+"WORK/"+rand);
>>>>>>> java.lang.String cmdline = theDir+"/cimmsim -f config";
>>>>>>> try {
>>>>>>> Process p = Runtime.getRuntime().exec(cmdline, null, theDir);
>>>>>>> }
>>>>>>> catch (IOException e)
>>>>>>> { e.printStackTrace(); }
>>>>>>>
>>>>>>> The error that is produced is:
>>>>>>> java.io.IOException: java.io.IOException:
>>>>>>> /srv/www/tomcat5/base/webapps/simulator/WORK/yqzatmopa343/cimmsim:
>>>>>>> cannot execute
>>>>>>>        at java.lang.UNIXProcess.(UNIXProcess.java:143)
>>>>>>>        at java.lang.Runtime.execInternal(Native Method)
>>>>>>>        at java.lang.Runtime.exec(Runtime.java:566)
>>>>>>>        at java.lang.Runtime.exec(Runtime.java:428)
>>>>>>>        at RunSimulation.run(CimmSimServlet.java:655)
>>>>>>>
>>>>>>> A uname -a on the system gives:
>>>>>>> Linux apppx1 2.6.16.13-4-xen #1 SMP Wed May 3 04:53:23 UTC 2006 x86_64
>>>>>>> x86_64 x86_64 GNU/Linux
>>>>>>> SUSE LINUX 10.1
>>>>>>>
>>>>>>> I have ensured that the permissions are set to at least 755 and am now
>>>>>>> at a bit of a loss.
>>>>>>> Any ideas?
>>>>>>>
>>>>>>> Cheers
>>>>>>> Mark
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> -- 
>>>>>>> ---------------------------------------------------------------------------
>>>>>>>  
>>>>>>>
>>>>>>> Mark Halling-Brown                      | Tel: +44-20-7631-6839
>>>>>>> Research Associate                      |
>>>>>>> Room 359                                | Fax: +44-20-7631-6803
>>>>>>> School of Crystallography               |
>>>>>>> Birkbeck College                        | Email:
>>>>>>> Malet Street                            | [EMAIL PROTECTED]
>>>>>>> London WC1E 7HX                         | [EMAIL PROTECTED]
>>>>>>> UK                                      |
>>>>>>>               http://people.cryst.bbk.ac.uk/~ghall04
>>>>>>> ---------------------------------------------------------------------------
>>>>>>>  
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To start a new topic, e-mail: users@tomcat.apache.org
>>>>>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>>>>>> For additional commands, e-mail: [EMAIL PROTECTED]
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> -- 
>>>>>>> No virus found in this incoming message.
>>>>>>> Checked by AVG Free Edition.
>>>>>>> Version: 7.1.405 / Virus Database: 268.12.2/443 - Release Date: 
>>>>>>> 11/09/2006
>>>>>>>
>>>>>>>
>>>>>>>       
>>>>>>>             
>>>>>>    
>>>>>>            ___________________________________ Yahoo! Mail: gratis 
>>>>>> 1GB per i messaggi e allegati da 10MB http://mail.yahoo.it
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>>> To start a new topic, e-mail: users@tomcat.apache.org
>>>>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>>>>> For additional commands, e-mail: [EMAIL PROTECTED]
>>>>>>     
>>>>>>           
>>>>>   
>>>>>         
>>>> ---------------------------------------------------------------------
>>>> To start a new topic, e-mail: users@tomcat.apache.org
>>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>>> For additional commands, e-mail: [EMAIL PROTECTED]
>>>>       
>>> -- 
>>> ---------------------------------------------------------------------------
>>> Mark Halling-Brown                      | Tel: +44-20-7631-6839
>>> Research Associate                      |
>>> Room 359                                | Fax: +44-20-7631-6803
>>> School of Crystallography               |
>>> Birkbeck College                        | Email:
>>> Malet Street                            | [EMAIL PROTECTED]
>>> London WC1E 7HX                         | [EMAIL PROTECTED]
>>> UK                                      |
>>>               http://people.cryst.bbk.ac.uk/~ghall04                    
>>> ---------------------------------------------------------------------------
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To start a new topic, e-mail: users@tomcat.apache.org
>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>> For additional commands, e-mail: [EMAIL PROTECTED]
>>>
>>>     
>> >
> 
> 
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
>

Reply via email to