Re: [Php-java-bridge-users] Debian's security manager

[<php...@li...>]

I haven't tested it, but it may be suficient to move the JavaBridge.jar,
php-script.jar and php-servlet.jar to tomcats lib dir. Libraries loaded from
this directory should have AllPermission.

I will test this. This package change will be useful for the rpm package,
too.

Regards,
Jost Boekemeier

Apr 29, 2009 10:01 nachm. schrieb am <
php...@li...>:


Hello
Searching around, I found that tomcat5.5 directories were reorganized
in Debian Lenny, for FHS compliance.
Also, debian sun-jdk and tomcat 5.5 packages turn on security by default,
allowing
multiapps deployment.
Different from upstream tomcat.
Then, old or weak policies may break.
The debian right way should be to configure
/etc/tomcat5.5/policy.d/50user.policy
following [1] doc.
and [0] hints regarding paths, if needed.
I will try something like

grant codeBase
"file:${catalina.base}/webapps/JavaBridge/-"
{
       permission java.security.AllPermission;
};

Maybe could work.
More suggestions?
Regards.
Andre Felipe

[0]
http://aleph-null.tv/article/20080327-0202-760.xml/Tomcat-5.5-On-Debian:-Security-policies-and-%7Bcatalina.home%7D
[1] http://tomcat.apache.org/tomcat-5.5-doc/security-manager-howto.html



On Wed, 29 Apr 2009 08:41:43 -0300,

php...@li... wrote: >

> I guess the right way is a correct edition of > >
/etc/tomcat5.5/policy.d/04webapps.policy > > u...

------------------------------------------------------------------------------
Register Now & Save f...