tomcat5 policy changes suggestion

[Arnaud Vandyck]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Wolfgang Baer wrote:
> Hi Michael,

Hi Michael, Hi Wolfgang,

[...]

>>  permission java.io.FilePermission
>> "/var/lib/tomcat5/conf/Catalina/-",
>> "read,write,delete";
>>  permission java.net.SocketPermission
>> "java.sun.com:80", "connect,resolve";
> 
> You didn't say what application you are trying to deploy.
> However giving complete permissions to the configuration
> directory is not a good thing imho.

That's a very bad idea IMHO too ;-)

> Also I wonder why an application needs to
> connect to java.sun.com ?

Maybe to read the dtd's?.. But I don't know JSF.

Cheers,

- --
  .''`.
 : :' :rnaud
 `. `'
   `-
Java Trap: http://www.gnu.org/philosophy/java-trap.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDnpbz4vzFZu62tMIRAvFMAJ9od8mD9DiLrRcmjtwPXGeh9/ISEwCgk7gR
mV1oF2E4ShtXg2GZ+engmWs=
=QONX
-----END PGP SIGNATURE-----