Charly,

The URL, provided by Christopher, provides some very useful tips for port 80 binding. I would also like to add, another option (used in the hosting world) is to create a VPS for the application server to run under. So the application server would be able to run as root but yet in a restrictive environment set by the VPS policy.


Christopher Schultz wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Charly,

charly wrote:
jsvc seems to be no matter on this mailing list?

Well, this is the Tomcat mailing list... not the jsvc mailing list. Try
asking on the commons-user mailing list. We can't be experts on all
subjects posted to this list, even if jsvc /is/ often suggested as a
useful tool. I also suggest using 'cron' all the time, but asking
questions about cron on this list is a mistake, too.

Are there other tools for running tomcat on port 80 with nonroot user on
unix/solaris?

http://www.owasp.org/index.php/Securing_tomcat#Using_Port_80

Running apache only for nonroot port 80 access seems to be
oversized/extensive for me (maintenance,complexity,..)

Then use one of the other options.

- -chris

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG6UO79CaO5/Lv0PARAmsgAJ9iwUIlCVyI8HrMG+oNuPDlbeE6/QCffk5S
2ZTBRDeKOqiUMo7OhJXiJiw=
=gk9Q
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]





--
Regards



Gabriel Wong

Beyond Private JVM JAVA Hosting

http://www.webappcabaret.com


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to