On Tue, 19 Feb 2002, Patrick Luby wrote:

> Pier,
> 
> Hmmm. I could only find the setuid() calls in the parent process that launches
> Tomcat. I couln't find any code JNI code (or a shared library) that Tomcat could
> use to temporarily switch the user back to root immediately before binding a
> ServerSocket object and then switching the user back immediately after. Maybe

How easy would it be if that was possible ? For both hackers and 
developers :-)

Changing the uid to root is certainly impossible AFAIK ( at least on 
unix, on NT everything is possible, but I hope not this one ). 

The other part is possible and I think it's a very good solution.

Costin


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to