Re: [Php-java-bridge-users] Debian's security manager tomcat XSELinux

[<php...@li...>]

<3af...@ma...>
<200...@te...> <3af...@ma...>
Message-ID: <d9c817cbb46a25537554979e67e27623@localhost>
X-Sender: and...@te...
Received: from 161.148.54.70 [161.148.54.70] with HTTP/1.1 (POST); Thu, 30 Apr
	2009 06:37:39 -0300
User-Agent: RoundCube Webmail/0.1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit


Hello, Jost

Maybe the attachment was stripped by sf.net server.

The file is at cvs repository now, at HEAD, at /server directory (is it the

best location?).

I am not a security expert, so I left the file as it is now at cvs (enough

for

development) and will study SELinux apps debian packaging procedures next

week.

Good luck!

Andre Felipe





On Thu, 30 Apr 2009 19:16:18 +0200,

php...@li... wrote:

> Hi Andre,

> 

> I am moving to Hamburg , so I probably won't have much time until next

> week.

> 

> The attachment didn't come through, btw. My telefone cannot decode base64

> attachments, yet. I assume that you have added some rules to allow php to

> execute scripts.

> 

> But I am not yet convinced that a strict java policy is worth the

trouble.

> The biggest security hole is php itself, not some missing java policy.

> 

> Regards,

> Jost Boekemeier