Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (asf.osuosl.org: domain of mspetrovic@gmail.com designates
 64.233.162.200 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
        b=FbnEoTMJdzKhfzl8Pt/Fgk9zwwBd1HH1lq7oRancJca/6nzA589PHwdGFF+EDpI1eJ882WMVCKTvyKAnij/CIiXWlZcqPyxmmSE/FtEy6lZBVqiDtessWSsGkouRDcdQuNEysY/OK8RqtNCBJpp/PymDPK91fOPdj0Eloi40VDM=
Message-ID: <652b9c0b0605071528k20c22c87j6ed89fdd4435616e@mail.gmail.com>
Date: Sun, 7 May 2006 15:28:01 -0700
From: "Mark Petrovic" <mspetrovic@gmail.com>
To: users@tomcat.apache.org
Subject: Re: Living a Tomcat life with the catalina.policy file: policy file
 analysis tools
In-Reply-To: <652b9c0b0605070902v14a1eff0o5196189d1f285b5d@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_24499_29085893.1147040881719"
References: <652b9c0b0605070902v14a1eff0o5196189d1f285b5d@mail.gmail.com>

------=_Part_24499_29085893.1147040881719
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

I got to thinking about this tool problem.  Here is a a bit of basic work o=
n
a tool to generate a catalina.policy file.  Time will tell if it's useful.
Someone may have already solved this problem, but it's all fun.

http://www.petrovic.org/blog/?p=3D134


On 5/7/06, Mark Petrovic <mspetrovic@gmail.com> wrote:
>
> Good day.
>
> This is a newbie question.
>
> Having spent a bit of time manually editing via trial and error my
> catalina.policy file just right so my webapp would run leaves me wonderin=
g
> whether there is a tool that can be responsibly used to show you what  th=
e
> policy file should look like if the app is to get its job done.
>
> I spent a lot of time examining the various security violations in
> catalina.out, and concluded that while it may not be trivial, it is
> conceivable that a tool could automate the production of a farily
> fine-grained policy file to show you what the app ideally needs to run.  =
And
> you could edit from there as needed.
>
> Are there such tools?
>
> Thank you.
>
> --
> Mark
> AE6RT
>


--
Mark
AE6RT

------=_Part_24499_29085893.1147040881719--