Author: schultz Date: Wed Mar 21 18:28:59 2018 New Revision: 1827428 URL: http://svn.apache.org/viewvc?rev=1827428&view=rev Log: Always send the OS's umask to the JVM.
Modified: tomcat/trunk/bin/catalina.sh tomcat/trunk/webapps/docs/changelog.xml tomcat/trunk/webapps/docs/config/listeners.xml Modified: tomcat/trunk/bin/catalina.sh URL: http://svn.apache.org/viewvc/tomcat/trunk/bin/catalina.sh?rev=1827428&r1=1827427&r2=1827428&view=diff ============================================================================== --- tomcat/trunk/bin/catalina.sh (original) +++ tomcat/trunk/bin/catalina.sh Wed Mar 21 18:28:59 2018 @@ -284,9 +284,8 @@ if [ -d "$CATALINA_HOME/endorsed" ]; the ENDORSED_PROP=java.endorsed.dirs fi -# Uncomment the following line to make the umask available when using the -# org.apache.catalina.security.SecurityListener -#JAVA_OPTS="$JAVA_OPTS -Dorg.apache.catalina.security.SecurityListener.UMASK=`umask`" +# Make the umask available when using the org.apache.catalina.security.SecurityListener +JAVA_OPTS="$JAVA_OPTS -Dorg.apache.catalina.security.SecurityListener.UMASK=`umask`" if [ -z "$USE_NOHUP" ]; then if $hpux; then Modified: tomcat/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1827428&r1=1827427&r2=1827428&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/changelog.xml (original) +++ tomcat/trunk/webapps/docs/changelog.xml Wed Mar 21 18:28:59 2018 @@ -147,6 +147,9 @@ SourceForge and Maven Central to avoid failures due to HTTP to HTTPS redirects. (markt) </fix> + <add> + Always report the OS's umask when launching the JVM. (schultz) + </add> </changelog> </subsection> </section> Modified: tomcat/trunk/webapps/docs/config/listeners.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/listeners.xml?rev=1827428&r1=1827427&r2=1827428&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/config/listeners.xml (original) +++ tomcat/trunk/webapps/docs/config/listeners.xml Wed Mar 21 18:28:59 2018 @@ -298,9 +298,11 @@ <p>The <strong>Security Lifecycle Listener</strong> performs a number of security checks when Tomcat starts and prevents Tomcat from starting if they fail. The listener is not enabled by default. To enabled it uncomment the - listener in $CATALINA_BASE/conf/server.xml. If the operating system supports - umask then the line in $CATALINA_HOME/bin/catalina.sh that obtains the umask - also needs to be uncommented.</p> + listener in $CATALINA_BASE/conf/server.xml. For Tomcat versions before 9.0.7, + if the operating system supports umask then the line in + $CATALINA_HOME/bin/catalina.sh that obtains the umask also needs to be + uncommented. For Tomcat 9.0.7 and later, the umask is automatically + passed-into Tomcat.</p> <p>This listener must only be nested within <a href="server.html">Server</a> elements.</p> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org