>>>>> "Adam" == Adam Heath <[EMAIL PROTECTED]> writes:

>>>>> "Stefan" == Stefan Gybas wrote:
Stefan> Fine, and the Debian package uses the same user as Apache
Stefan> (default: www-data), also for security reasons :)

Adam> I consider that a bug, and should probably file one. tomcat
Adam> should not run as the same user as apache, for security reasons.

It's an option - see /etc/defaults/tomcat

And out of curiosity: how does that count as a security risk?

-- 
G. ``Iggy'' Geens - ICQ: #64109250
Home: <[EMAIL PROTECTED]> - Work: <[EMAIL PROTECTED]>
WWW: http://users.pandora.be/guy.geens/
`I want quality, not quantity. But I want lots of it!'


Reply via email to