Re: [Php-java-bridge-users] Debian's security manager

[<php...@li...>]

I think PHP should have the same permissions tha JSP has.

If I understand Java's security correctly, we only need to place the
JavaBridge.jar into the same directory from which the JSP library is loaded.

Unfortunately I can't verify this at the moment.

Regards,
Jost Boekemeier

Apr 29, 2009 10:13 nachm. schrieb am <
php...@li...>:

<3af...@ma...>
<200...@te...> <
3af...@ma...>
Message-ID: <1dec4d2e0bebecc88f51d99ff996ca2d@localhost>

X-Sender: and...@te... Received: from 161.148.54.70
[161.148.54.70] with HTTP/1.1 (...
       2009 09:14:37 -0300

User-Agent: RoundCube Webmail/0.1 Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encodin...
The following worked enough at

compiling 5.4.4.2-1 debian package from cvs and after restarting

the tomcat5.5 server with



invoke-rc.d tomcat5.5 restart





Added at:

/etc/tomcat5.5/policy.d/50user.policy



The lines:

grant codeBase "file:${catalina.base}/webapps/JavaBridge/-" { permission
java.security.AllPer...
But i guess it is too permissive for production environment.

Is there a stricter security configuration that allow

JavaBridge work, or it should stay "AllPermissions" for all directory?



Regards.

Andre Felipe Machado

http://www.techforce.com.br

------------------------------------------------------------------------------
Register Now & Save...

php...@li...

https://lists.sourceforge.net/lists/listinfo/php-java-bridge-users