Re: [Php-java-bridge-users] Debian's security manager

[<php...@li...>]

Hello
Searching around, I found that tomcat5.5 directories were reorganized
in Debian Lenny, for FHS compliance.
Also, debian sun-jdk and tomcat 5.5 packages turn on security by default,
allowing 
multiapps deployment.
Different from upstream tomcat.
Then, old or weak policies may break.
The debian right way should be to configure 
/etc/tomcat5.5/policy.d/50user.policy
following [1] doc.
and [0] hints regarding paths, if needed.
I will try something like 

grant codeBase 
"file:${catalina.base}/webapps/JavaBridge/-" 
{
        permission java.security.AllPermission;
};

Maybe could work.
More suggestions?
Regards.
Andre Felipe

[0]
http://aleph-null.tv/article/20080327-0202-760.xml/Tomcat-5.5-On-Debian:-Security-policies-and-%7Bcatalina.home%7D
[1] http://tomcat.apache.org/tomcat-5.5-doc/security-manager-howto.html



On Wed, 29 Apr 2009 08:41:43 -0300,
php...@li... wrote:

> 
> I guess the right way is a correct edition of
> 
> /etc/tomcat5.5/policy.d/04webapps.policy
> 
> using the debconf tools.
>