On Tue, May 18, 2004 at 01:47:32PM -0500, Filip Hanik - Dev wrote:
: The safest bet is to write to the user's (the user running your tomcat) home 
directory.
: The property is user.home (System.getProperty("user.home")

Not always.
Put another way, this would be more "specific instructions" you'd have
to send to the remote admins, which you mentioned you weren't too keen
on providing (since they wouldn't be followed).

In some security-conscious environments, admins want generic users
to have as few writable spaces as possible.

e.g. the home dir for the tomcat user could be "/dev/null," or just a
non-writable dir with some local defaults.

What about using a specific subdirectory of the temp dir, I believe it's
sys property "temp.dir" or "tmp.dir"?  This would also permit the cached
data to be cleared in the event of trouble, and when the machine
rebooted (under Solaris, or any other setup that uses a memory-based fs
for /tmp).

-QM

-- 

software  -- http://www.brandxdev.net
tech news -- http://www.RoarNetworX.com


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to