Le 2/12/2016 à 00:48, paul.sz...@sydney.edu.au a écrit :

> You seem to say that  /etc/tomcat8/Catalina/localhost  does not need to
> be writable by tomcat8, setting it so was useless (thus wrong).

For the stable update I've left /etc/tomcat8/Catalina/localhost writable
by tomcat8. As you suggested the permissions are set at the file level
inside the .deb and not in the postinst script.

https://anonscm.debian.org/cgit/pkg-java/tomcat8.git/commit/?h=jessie&id=d28c720

> What about the  /etc/tomcat8/Catalina  directory, is there a need to set
> it writable? Is there a need to have these owned by group tomcat8, could
> they be left as root:root and world-accessible?

Good question, I tend to agree. That's probably the next step, this is
being discussed in #833257.

Emmanuel Bourg

Reply via email to