On Thu, 29 Nov 2001, Stefan Gybas wrote: > Fine, and the Debian package uses the same user as Apache (default: > www-data), also for security reasons :) I consider that a bug, and should probably file one. tomcat should not run as the same user as apache, for security reasons.