[jetty-discuss] [jira] Commented: (JETTY-353) tmp directory is created with wrong uid when running jetty with setuid feature

[Greg W. (JIRA) <ji...@co...>]

    [ http://jira.codehaus.org/browse/JETTY-353?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_98978 ] 

Greg Wilkins commented on JETTY-353:
------------------------------------

For now, if you create a directory $JETTY_HOME/work it will be used as the temp directory and will
should avoid this issue.

Alternately you could write a config file that does:

configure connectors.
calls open on connectors.
does setUid
starts the server.

This ordering will also avoid the issue and will not run any webapps as root.




> tmp directory is created with wrong uid when running jetty with setuid feature
> ------------------------------------------------------------------------------
>
>                 Key: JETTY-353
>                 URL: http://jira.codehaus.org/browse/JETTY-353
>             Project: Jetty
>          Issue Type: Bug
>          Components: Security and SSL
>    Affects Versions: 6.1.3
>         Environment: ubuntu linux
>            Reporter: Stefan Podkowinski
>
> I'm running jetty with the new setuid feature but can't get any jsp's working, because the created tmp directory (e.g. mine is /tmp/Jetty_0_0_0_0_80_web____odwq8l under linux) will be created with the uid of the user starting jetty before setuid becomes effective (which is root in my case). When jetty tries to generate the java source from the jsp, an exception occures.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira