tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Miguel Torres Fernández <miguel.torres....@juntadeandalucia.es>
Subject Re: Set System variables.
Date Mon, 26 Oct 2009 10:28:15 GMT
Peter Crowther escribió:
> 2009/10/26 Miguel Torres Fernández <miguel.torres.ext@juntadeandalucia.es>:
>   
>> At firts say hello, this is my first message to the list.
>>     
>
> Welcome!
>
>   
>> I'm a system admin and i have a problem with applications thats set system
>> variables like proxy of the system (system.setProperties). It's a big
>> problem for us, i have an instance of tomcat with more than ten applications
>> and the past week two of them modify parameters of the system like proxy or
>> trustkeystore.
>>
>> Exist some jdk options to avoid applications to set this parameters?
>>     
>
> Not JDK, but you can run Tomcat with a security manager to prevent
> such calls.  You've not told us which version of Tomcat you're
> running, so I'll link the most recent (Tomcat 6.0.x) document:
> http://tomcat.apache.org/tomcat-6.0-doc/security-manager-howto.html
>
> Tuning the security manager often takes quite a lot of work, as you
> need to find out what to allow as well as what to deny.
>
> - Peter
>   

Oh, it's true.

I'm running tomcat 5.5.27 with jdk 1.5.0_18 under Red Hat 5. Only one 
instance in two servers cluster.

Now, i'm reading about security-manager.

Thanks.
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
>   


-- 
Miguel Torres Fernández
Consejería de Empleo
Servicios Centrales (Asistencia Linux)
asistencialinux.cem@juntadeandalucia.es
Avda. Hytasa nº 14.
(955048979 - RCJA. 348979)


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message