Le 2/12/2016 à 00:48, paul.sz...@sydney.edu.au a écrit : > You seem to say that /etc/tomcat8/Catalina/localhost does not need to > be writable by tomcat8, setting it so was useless (thus wrong).
For the stable update I've left /etc/tomcat8/Catalina/localhost writable by tomcat8. As you suggested the permissions are set at the file level inside the .deb and not in the postinst script. https://anonscm.debian.org/cgit/pkg-java/tomcat8.git/commit/?h=jessie&id=d28c720 > What about the /etc/tomcat8/Catalina directory, is there a need to set > it writable? Is there a need to have these owned by group tomcat8, could > they be left as root:root and world-accessible? Good question, I tend to agree. That's probably the next step, this is being discussed in #833257. Emmanuel Bourg