Author: schultz
Date: Wed Mar 21 18:28:59 2018
New Revision: 1827428
URL: http://svn.apache.org/viewvc?rev=1827428&view=rev
Log:
Always send the OS's umask to the JVM.
Modified:
tomcat/trunk/bin/catalina.sh
tomcat/trunk/webapps/docs/changelog.xml
tomcat/trunk/webapps/docs/config/listeners.xml
Modified: tomcat/trunk/bin/catalina.sh
URL:
http://svn.apache.org/viewvc/tomcat/trunk/bin/catalina.sh?rev=1827428&r1=1827427&r2=1827428&view=diff
==============================================================================
--- tomcat/trunk/bin/catalina.sh (original)
+++ tomcat/trunk/bin/catalina.sh Wed Mar 21 18:28:59 2018
@@ -284,9 +284,8 @@ if [ -d "$CATALINA_HOME/endorsed" ]; the
ENDORSED_PROP=java.endorsed.dirs
fi
-# Uncomment the following line to make the umask available when using the
-# org.apache.catalina.security.SecurityListener
-#JAVA_OPTS="$JAVA_OPTS
-Dorg.apache.catalina.security.SecurityListener.UMASK=`umask`"
+# Make the umask available when using the
org.apache.catalina.security.SecurityListener
+JAVA_OPTS="$JAVA_OPTS
-Dorg.apache.catalina.security.SecurityListener.UMASK=`umask`"
if [ -z "$USE_NOHUP" ]; then
if $hpux; then
Modified: tomcat/trunk/webapps/docs/changelog.xml
URL:
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1827428&r1=1827427&r2=1827428&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/trunk/webapps/docs/changelog.xml Wed Mar 21 18:28:59 2018
@@ -147,6 +147,9 @@
SourceForge and Maven Central to avoid failures due to HTTP to HTTPS
redirects. (markt)
</fix>
+ <add>
+ Always report the OS's umask when launching the JVM. (schultz)
+ </add>
</changelog>
</subsection>
</section>
Modified: tomcat/trunk/webapps/docs/config/listeners.xml
URL:
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/listeners.xml?rev=1827428&r1=1827427&r2=1827428&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/config/listeners.xml (original)
+++ tomcat/trunk/webapps/docs/config/listeners.xml Wed Mar 21 18:28:59 2018
@@ -298,9 +298,11 @@
<p>The <strong>Security Lifecycle Listener</strong> performs a number of
security checks when Tomcat starts and prevents Tomcat from starting if
they
fail. The listener is not enabled by default. To enabled it uncomment the
- listener in $CATALINA_BASE/conf/server.xml. If the operating system
supports
- umask then the line in $CATALINA_HOME/bin/catalina.sh that obtains the
umask
- also needs to be uncommented.</p>
+ listener in $CATALINA_BASE/conf/server.xml. For Tomcat versions before
9.0.7,
+ if the operating system supports umask then the line in
+ $CATALINA_HOME/bin/catalina.sh that obtains the umask also needs to be
+ uncommented. For Tomcat 9.0.7 and later, the umask is automatically
+ passed-into Tomcat.</p>
<p>This listener must only be nested within <a
href="server.html">Server</a>
elements.</p>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
