Package: tomcat5.5
Version: 5.5.20-4
Severity: minor

Now that the Java security manager is turned on by default (worth
highlighting in README.Debian?), I found that loggig was failing.

This was because I had a web-app logging to
${catalina.base}/logs/webappname.log

The application didn't have permission to read the catalina.base
property and so this failed (it tried to log to /logs/webappname.log).
(Tomcat logs using log4j were okay). 

Since many applications use this, I think it might be worth adding
permission to read these values:

// log4j and various other items want catalina.base
grant {
  permission java.util.PropertyPermission "catalina.base", "read";
  permission java.util.PropertyPermission "catalina.home", "read";
};


Adrian 
-- 
Adrian Bridgett - [EMAIL PROTECTED]
GPG key available on public key servers


_______________________________________________
pkg-java-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers

Reply via email to