Dear All, there are plenty resources mentioning it is a must to run tomcat as a dedicated user with limited permissions.
Is it still true when tomcat doesn't run standalone, but via Apache web server connected via AJP? That webserver already runs in the restrictive mode. Thanks, Jan
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org