Peter Crowther escribió:
2009/10/26 Miguel Torres Fernández <miguel.torres....@juntadeandalucia.es>:
At firts say hello, this is my first message to the list.
Welcome!
I'm a system admin and i have a problem with applications thats set system
variables like proxy of the system (system.setProperties). It's a big
problem for us, i have an instance of tomcat with more than ten applications
and the past week two of them modify parameters of the system like proxy or
trustkeystore.
Exist some jdk options to avoid applications to set this parameters?
Not JDK, but you can run Tomcat with a security manager to prevent
such calls. You've not told us which version of Tomcat you're
running, so I'll link the most recent (Tomcat 6.0.x) document:
http://tomcat.apache.org/tomcat-6.0-doc/security-manager-howto.html
Tuning the security manager often takes quite a lot of work, as you
need to find out what to allow as well as what to deny.
- Peter
Oh, it's true.
I'm running tomcat 5.5.27 with jdk 1.5.0_18 under Red Hat 5. Only one
instance in two servers cluster.
Now, i'm reading about security-manager.
Thanks.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
--
Miguel Torres Fernández
Consejería de Empleo
Servicios Centrales (Asistencia Linux)
asistencialinux....@juntadeandalucia.es
Avda. Hytasa nº 14.
(955048979 - RCJA. 348979)
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org