Matti Haack wrote:
You can mitigate/fix the Problem if you run ASSP in a proper
security context.

If you run it in Windows, create an speacial User which
could only access the ASSP directories. Start the
service under the context of this special user and
everything is fine.
  

An excellent approach (and what I do as well).  The text-book definition of this would be called a "service account".  Personally, I create service accounts for *all* applications that install as services.  So, I have an Exchange service account, a SQL service account, an ASSP service account, etc, etc, etc...

I validated it with NT Filemon and it told me "access denied" -
but everything "regular" runs without problems.
  

Another excellent approach.  Win32 users that are interested in using the Filemon (File Monitor) tool can find it at SysInternals.net

The best would be to a) fix the problem and b) add a note to
the readme, to run the software with a limited user context.

I hope to have it properly documented and posted on the Wiki soon.
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to