In case you want to run jwma Webmail under tomcat,
with the security manager activated (as it is the case
with Debian linux), here is a security policy file template.
I use it for a UW-IMAP server hosted on the same host
as tomcat 4.0. It should work with later versions of
tomcat too.