[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities



On Son, 2008-01-06 at 20:14 +0100, Bernd Eckenfels wrote:
> In article <1199525586.8906.7.camel@localhost> you wrote:
> > (java.io.FilePermission
> > /home/nihil/www/java/WEB-INF/classes/logging.properties read)
> 
> > (it worked before the update and permission are set correctly, i double checked)
> 
> This is a java security policy violation, not related to OS file
> permissions. Maybe you started it with security policy and did not before?
> 
> Gruss
> Bernd
> 
> 
no init.d script always starts with security manager enabled. and I am
sure because I had to write java policy for access e.g. my database. 



Reply to: