Jerome Benezech wrote: > Is there a way to ensure that only the root user can > read this file ?
Not quite root only but it will meet your requirement... Run Tomcat under a security manager. That way, webapps don't have access to files outside the docBase without explicit permissions being defined. This also protects from applications calling System.exit() and a host of other issues. Mark --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]