Re: Tomcat 3.3 / 4.0 ? When?
>>>>> "Adam" == Adam Heath <doogie@debian.org> writes:
>>>>> "Stefan" == Stefan Gybas wrote:
Stefan> Fine, and the Debian package uses the same user as Apache
Stefan> (default: www-data), also for security reasons :)
Adam> I consider that a bug, and should probably file one. tomcat
Adam> should not run as the same user as apache, for security reasons.
It's an option - see /etc/defaults/tomcat
And out of curiosity: how does that count as a security risk?
--
G. ``Iggy'' Geens - ICQ: #64109250
Home: <ggeens@iname.com> - Work: <guy.geens@cgey.be>
WWW: http://users.pandora.be/guy.geens/
`I want quality, not quantity. But I want lots of it!'
Reply to: