User-agent: Mozilla Thunderbird 1.0.2 (Macintosh/20050317)
Jim Youll wrote:
> i say 'mojo' because afaik Apache httpd has not wanted to run as root
> for a very long time, it is often running as the user 'httpd' around the
> systems i manage anyway...
>
> what i was mentioning, that you just ignored, is that httpd does this as
> standard practice, tomcat does not, i am wondering why not.
Changing the EUID is good practice under Unix (for not too long either)
but Java has no APIs to do it. Your process has to be started as root
though (as the httpd is usually) before you can drop into a different
lower priviledged account.
Changing the EUID is not a trivial thing for a mutlithreaded VM to do
correctly (not to mention cross-platform). Also you have to start the
full VM as root with all the security problems that ensue.
That's why Tomcat doesn't do it (I think).
Cheers
Robert
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden
This email sent to email@hidden
