RE: Tomcat shutdown & security

2002-09-06 Thread Przemyslaw Wegrzyn
On Fri, 2002-09-06 at 21:04, Turner, John wrote: > > Very interesting. I hadn't investigated this scenario until now. I like > your suggestion. Even more, I've checked what exactly goes there, and you can stop default Tomcat installation by simply telneting localhost 8005 and typing SHUTDOW fr

RE: Tomcat shutdown & security

2002-09-06 Thread Przemyslaw Wegrzyn
On Fri, 2002-09-06 at 14:40, Shapira, Yoav wrote: > Hi, > How about not letting any regular user execute bin/shutdown.sh? ;) ;) ;) Nope, it's not the solution. Anyone can download tomcat, extract shutdown.sh and execute. Shutdown connects to Tomcat through a socket, so it's even possible across

Tomcat shutdown & security

2002-09-05 Thread Przemyslaw Wegrzyn
Hello ! I've just installed Tomcat, and discovered, that any regular user can stop Tomcat with bin/shutdown.sh. How can I protect Tomcat from this ? P.Wegrzyn -- To unsubscribe, e-mail: For additional commands, e-mail: