https://issues.apache.org/bugzilla/show_bug.cgi?id=50156

--- Comment #1 from Chuck Caldarale <chuck.caldar...@unisys.com> 2010-10-25 
23:12:50 EDT ---
(In reply to comment #0)
> If you specify "../log.txt" for a new filename, the existing log file is
> renamed to "<Tomcat boot directory>/../log.txt".
> And, rotate() overwrite other existing files, if tomcat startup user has the
> write permission on those files.

And has permission to use JMX to manipulate Tomcat, which can lead to all sorts
of disastrous results if used unwisely.  If you have the privilege to modify
the Tomcat configuration, you are expected to do so responsibly.

Note also that your patch prevents anyone from moving the log file(s) to some
directory other than the original - severely reducing flexibility.

 - Chuck

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to