Completely not working is a great security fix yes... If that distro is still in 5.5 mode then i question there updates
On 1/21/08, C. Bergström <[EMAIL PROTECTED]> wrote: > > On Mon, 2008-01-21 at 11:31 +0100, Martijn Dashorst wrote: > > You might want to skip the packaged version (IMO linux packagers don't > > get the Java packaging), and just unzip a tarball > > in /opt/tomcat/tomcat-5.5.20 > > > > > > Then you are in complete control over how the server runs. > > > -1 > > Some distro packaging systems while admittedly are lacking in certain > areas are there for a reason. > > 1) Tomcat is not perfect software and thus may have some security issue > either in core or in the default context that's enabled by default and > thus not everyone follows such alerts/advisories for a living. (Trusting > that the distro will issue an update and the system is regularly > maintained.) > 2) I'm not sure this takes into account the install of tomcat native > libs and also any distro related changes there > > etc etc... > > > > Martijn > > > <snip /> > > > > > > Apparently the latest version ( 5.5.20-2etch1) has additional > > security headaches features which prevent wicket from > > functioning properly out-of-the-box: > > I consider this a positive thing as it means some forethought has > actually gone into this package. > > <snip /> > > > > > Any ideas on how to better configure Tomcat? > > Not at the moment. The best I can offer is give me about a week and > I'll see if I can get deb etch installed in vmware and have a look. > > > Good luck, > > ./C > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- Sent from Gmail for mobile | mobile.google.com --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
