I know why Java can't do this inherently. I was hoping for some sort of
tricky wrapper in the j-t-s code.

Lots of security reasons to *not* change to a non-root user? You're saying
it's more secure to run Tomcat as root? I would think it would be the other
way around. Can you elaborate?

Thanks,
--jeff

----- Original Message -----
From: "Randy Layman" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Monday, November 19, 2001 3:54 AM
Subject: RE: Does jakarta-tomcat-service work for *nixes?


>
>
> > -----Original Message-----
> > From: Jeff Kilbride [mailto:[EMAIL PROTECTED]]
> > Sent: Sunday, November 18, 2001 2:41 AM
> > To: [EMAIL PROTECTED]
> > Subject: Does jakarta-tomcat-service work for *nixes?
> >
> >
> > I went through the archives trying to figure out how to run
> > Tomcat (4.0.1)
> > as a non-root user on port 80. I found references to the
> > jakarta-tomcat-service module in the CVS, so I logged in and
> > downloaded it.
> > Unfortunately, there doesn't seem to be much info on how to
> > set it up -- at
> > least, not for a Linux/Unix environment.
> >
> > Does jakarta-tomcat-service work for Linux? It looks like it
> > may only work
> > for WinNT. If it doesn't work for Linux, is there any other method for
> > starting Tomcat non-root on port 80?
>
> No it doesn't work for Linux.  And no, there is no way for Tomcat to run
as
> a non-root user on port 80 - because Tomcat is written in Java and Java
> doesn't provide the setUID/setGID system calls there is no way to capture
> port 80 as root and then change the user to something else (which is how
the
> other major servers do it - C/C++ provides access to the system call).  By
> the way there are lots of security reasons to not do this.
>
> Randy
>
> >
> > Thanks,
> > --jeff
> >
> >
> >
> > --
> > To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> > For additional commands: <mailto:[EMAIL PROTECTED]>
> > Troubles with the list: <mailto:[EMAIL PROTECTED]>
> >
>
> --
> To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> For additional commands: <mailto:[EMAIL PROTECTED]>
> Troubles with the list: <mailto:[EMAIL PROTECTED]>
>


--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to