Return-Path: 
 <tomcat-user-return-132992-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 71933 invoked from network); 18 Sep 2005 11:31:44 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 18 Sep 2005 11:31:44 -0000
Received: (qmail 8062 invoked by uid 500); 18 Sep 2005 11:31:27 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 8050 invoked by uid 500); 18 Sep 2005 11:31:26 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 8037 invoked by uid 99); 18 Sep 2005 11:31:26 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 18 Sep 2005 04:31:26 -0700
X-ASF-Spam-Status: No, hits=0.5 required=10.0
	tests=FROM_ENDS_IN_NUMS
X-Spam-Check-By: apache.org
Received-SPF: neutral (asf.osuosl.org: local policy)
Received: from [66.33.216.24] (HELO smarty.dreamhost.com) (66.33.216.24)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 18 Sep 2005 04:31:34 -0700
Received: from strange.dreamhost.com (strange.dreamhost.com [66.33.193.57])
	by smarty.dreamhost.com (Postfix) with ESMTP id 9841D13F603;
	Sun, 18 Sep 2005 04:31:22 -0700 (PDT)
Received: by strange.dreamhost.com (Postfix, from userid 7734)
	id 21A896A879; Sun, 18 Sep 2005 04:31:13 -0700 (PDT)
Date: Sun, 18 Sep 2005 06:31:13 -0500
From: QM <qm300@brandxdev.net>
To: Tomcat Users List <tomcat-user@jakarta.apache.org>,
	shurikk@gmail.com
Subject: Re: different uid per <host> or perhaps something else
Message-ID: <20050918113112.GA29002@strange.dreamhost.com>
References: <856763c8050917153971adfb2c@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <856763c8050917153971adfb2c@mail.gmail.com>
User-Agent: Mutt/1.3.28i
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

On Sat, Sep 17, 2005 at 03:39:22PM -0700, Alexander Kabanov wrote:
: I have a bundle "apache - mod_jk - tomcat" working and virtual hosts
: properly configured,
: everything is nice, but with a few small issues. In addition to this
: configuration - each virtual
: host represents different users which don't trust each other.
: [rest of post deleted]

Generally speaking, if your app owners (users) don't trust one another
at the OS level, run their apps in separate instances of Tomcat.

This lets you run Tomcat as a different user for each container and, in
turn, use OS-level file perms to prevent unwanted access between apps.

-QM


-- 

software   -- http://www.brandxdev.net/
tech news  -- http://www.RoarNetworX.com/
code scan  -- http://www.JxRef.org/

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org