tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Fred Stluka <>
Subject Re: Why does startup of Tomcat 5.0.28 server make tomcat-users.xml world-readable?...
Date Wed, 15 Sep 2004 17:51:05 GMT

I have created a Linux user specifically to run Tomcat.
That user is the owner of the entire Tomcat directory
tree, including the tomcat-users.xml file.  The Tomcat
server process is running as that user.  I agree that that
600 should be sufficient for Tomcat to read and write
the file.

No, I have not yet configured a security manager.
This is pretty much Tomcat 5.0.28 with minimal

 Fred Stluka -- --
 Bristle Software, Inc -- -- "Glad to be of service!"

"Shapira, Yoav" wrote:

> Hi,
> Tomcat needs to change the file so that it (the Tomcat process) can
> (over)write it (the tomcat-users.xml file).  But you would think chmod
> u+w or g+w would be sufficient, not chmod o+w.  Are you running with a
> security manager?
> Yoav Shapira
> Millennium Research Informatics

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message