glenn 01/12/25 17:23:49
Modified: . tomcat.nsi
Log:
JVM Temporary Directory (java.io.tmpdir property) security patch
----------------------------------------------------------------
The java.io.File.createTempFile() methods use the property
java.io.tmpdir for the location of the directory where the JVM
places temporary files. If this property doesn't exist,
/tmp or /var/tmp gets used on unix systems or c:\\temp on WIN32 systems.
This default directory is the same directory that all applications
can use for temporary files. Sharing the same system temporary
directory between Tomcat and other applications could be a security
risk if sensitive data is stored there by other applications.
If you run Tomcat with the SecurityManager enabled you would have to
grant Tomcat a FilePermission with read, write, and delete for the
temporary directory.
This series of patches enables the use of a temporary directory
located at $CATALINA_BASE/temp so that Tomcat's use of the temporary
directory is isolated from the rest of the system.
Revision Changes Path
1.24 +3 -1 jakarta-tomcat-4.0/tomcat.nsi
Index: tomcat.nsi
===================================================================
RCS file: /home/cvs/jakarta-tomcat-4.0/tomcat.nsi,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -r1.23 -r1.24
--- tomcat.nsi 2001/12/19 17:53:33 1.23
+++ tomcat.nsi 2001/12/26 01:23:49 1.24
@@ -1,6 +1,6 @@
; Tomcat 4 script for Nullsoft Installer
-; $Id: tomcat.nsi,v 1.23 2001/12/19 17:53:33 remm Exp $
+; $Id: tomcat.nsi,v 1.24 2001/12/26 01:23:49 glenn Exp $
Name "apache-tomcat-4.1"
Caption "Apache Tomcat 4.1"
@@ -46,6 +46,7 @@
File /r logs
File /r server
File /r work
+ File /r temp
SetOutPath $INSTDIR\webapps
File webapps\*.xml
File /r webapps\ROOT
@@ -335,6 +336,7 @@
RMDir /r "$INSTDIR\webapps\webdav"
RMDir "$INSTDIR\webapps"
RMDir /r "$INSTDIR\work"
+ RMDir /r "$INSTDIR\temp"
RMDir /r "$INSTDIR\src"
RMDir "$INSTDIR"
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
