You need to add an appropriate permissions entry to your catalina.policy file. On Solaris, the file is in ${catalina.home}/conf. The permission you need to add is
permission java.io.FilePermission "/var/tomcat4/conf/server.xml" "read"; It should go into a "grant" section that pertains to the invoking code. See http://java.sun.com/j2se/1.4/docs/guide/security/PolicyFiles.html for the syntax and meanings. See http://jakarta.apache.org/tomcat/tomcat-4.0-doc/security-manager-howto.html for the modifications that Tomcat (at least version 4) makes. Mark -----Original Message----- From: Olivier Chicha [mailto:[EMAIL PROTECTED]] Sent: Friday, March 29, 2002 8:31 AM To: Tomcat Users List Subject: tomcat run -security under redhat 7.2 fails Hi, I'm trying to use the security manager. Each time I try to start tomcat with the security option the result is : java.security.AccessControlException: access denied (java.io.FilePermission /var/tomcat4/conf/server.xml read) at java.security.AccessControlContext.checkPermission(AccessControlContext.java :270) at java.security.AccessController.checkPermission(AccessController.java:401) at java.lang.SecurityManager.checkPermission(SecurityManager.java:542) at java.lang.SecurityManager.checkRead(SecurityManager.java:887) at java.io.File.isDirectory(File.java:698) at sun.net.www.protocol.file.FileURLConnection.connect(FileURLConnection.java:6 5) at sun.net.www.protocol.file.FileURLConnection.getInputStream(FileURLConnection .java:148) at java.net.URL.openStream(URL.java:955) at org.apache.xerces.readers.DefaultReaderFactory.createReader(DefaultReaderFac tory.java) at org.apache.xerces.readers.DefaultEntityHandler.startReadingFromDocument(Defa ultEntityHandler.java) at org.apache.xerces.framework.XMLParser.parseSomeSetup(XMLParser.java) at org.apache.xerces.framework.XMLParser.parse(XMLParser.java) at org.xml.sax.helpers.XMLReaderAdapter.parse(XMLReaderAdapter.java:223) at javax.xml.parsers.SAXParser.parse(SAXParser.java:314) at javax.xml.parsers.SAXParser.parse(SAXParser.java:253) at org.apache.catalina.util.xml.XmlMapper.readXml(XmlMapper.java:228) at org.apache.catalina.startup.Catalina.start(Catalina.java:725) at org.apache.catalina.startup.Catalina.execute(Catalina.java:681) at org.apache.catalina.startup.Catalina.process(Catalina.java:179) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39 ) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl .java:25) at java.lang.reflect.Method.invoke(Method.java:324) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243) Can You help me please? thanks Olivier -- To unsubscribe: <mailto:[EMAIL PROTECTED]> For additional commands: <mailto:[EMAIL PROTECTED]> Troubles with the list: <mailto:[EMAIL PROTECTED]>