Even if the permissions are set correctly you could just telnet localhost 8005 and type SHUTDOWN. If your worried about users that much, I'd rethink their account on that box. And do make sure port 8005 is not available where someone can send the shutdown command! -Dennis On Mon, 2002-06-03 at 17:18, Leland Chen wrote: > > Hi, > > I have tomcat web server configured run as "nobody", > but it can be stoped by any generic user using "shutdown.sh" > script. Even the CATALINA_BASE is not set correctly, tomcat > web server can be shutdown by any user account. > > Is there any way to prohibit this ? > > Thanks, > > Leland > > > >
 
> > > _________________________________________________________________ > Join the world’s largest e-mail service with MSN Hotmail. > http://www.hotmail.com > > > -- > To unsubscribe, e-mail: > For additional commands, e-mail: > -- To unsubscribe, e-mail: For additional commands, e-mail: