tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Luise Massimo <mlu...@computercenter.it>
Subject Re: Include directive problem
Date Tue, 15 Oct 2002 12:33:04 GMT
why do you think symlinks are a security risk ?

Mark Olliver wrote:

>I had the same problem referencing jar files, from what I can gather,
>(no doubt somebody will correct me if I'm wrong) symbolic links are a
>security risk.
>
>Mark
>
>On Tue, 2002-10-15 at 11:49, Luise Massimo wrote:
>  
>
>>Hi all,
>>
>>i have a problem with Tomcat 4.1.12:
>>
>>I'm using a JSP page that it use an "include directive" (<%@ include 
>>file=...%>) to include another JSP page.
>>The filename that i have specified is relative to the directory 
>>containing the first JSP page, but it is a symbolic link (i'm on a
>>    
>>
>linux 
>  
>
>>box).
>>When i access that JSP page, the JSP compiler throw a JasperException 
>>that say "FileNotFound" !
>>Before Tomcat 4.1.12 i was using 4.0.4 and the thing was ok.
>>
>>What is it wrong on using symlink ?
>>
>>Anyone can help me ?
>>
>>Thanks in advance. Max
>>
>>
>>
>>--
>>To unsubscribe, e-mail:
>>    
>>
><mailto:tomcat-user-unsubscribe@jakarta.apache.org>
>  
>
>>For additional commands, e-mail:
>>    
>>
><mailto:tomcat-user-help@jakarta.apache.org>
>  
>
>
>
>--
>To unsubscribe, e-mail:
><mailto:tomcat-user-unsubscribe@jakarta.apache.org>
>For additional commands, e-mail:
><mailto:tomcat-user-help@jakarta.apache.org>
>
>  
>

--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>


Mime
View raw message