Re: [Php-java-bridge-users] Debian's security manager

[<php...@li...>]

<3af...@ma...>
<200...@te...> <3af...@ma...>
Message-ID: <1dec4d2e0bebecc88f51d99ff996ca2d@localhost>
X-Sender: and...@te...
Received: from 161.148.54.70 [161.148.54.70] with HTTP/1.1 (POST); Wed, 29 Apr
	2009 09:14:37 -0300
User-Agent: RoundCube Webmail/0.1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit


Hello,

The following worked enough at 

compiling 5.4.4.2-1 debian package from cvs and after restarting

the tomcat5.5 server with



invoke-rc.d tomcat5.5 restart





Added at:

/etc/tomcat5.5/policy.d/50user.policy 



The lines:



grant codeBase "file:${catalina.base}/webapps/JavaBridge/-" 

{

 permission java.security.AllPermission; 

}; 



But i guess it is too permissive for production environment.

Is there a stricter security configuration that allow

JavaBridge work, or it should stay "AllPermissions" for all directory?



Regards.

Andre Felipe Machado

http://www.techforce.com.br