Re: Servlet that needs ROOT access

2006-09-08 Thread Martin Gainty
ror, please notify the sender immediately by telephone or email and destroy the original message without making a copy. Thank you. - Original Message - From: "Peter Crowther" <[EMAIL PROTECTED]> To: "Tomcat Users List" Sent: Tuesday, August 01, 2006 8:46 AM

[OT] RE: Servlet that needs ROOT access

2006-08-01 Thread Peter Crowther
[Marked OT as this is now some distance from Tomcat] > From: Christopher Schultz [mailto:[EMAIL PROTECTED] > I might even go farther and suggest that you go with > more a batch-job-list configuration I was assuming the app was for interactive control and that the OP wanted the user of the webapp

Re: Servlet that needs ROOT access

2006-08-01 Thread Christopher Schultz
Everyone, >> The servlet application needs to do things like mkfs, >> vgcfgrestore, vgchange, >> mount and umount. Eek. From a webapp? > I'd use setuid scripts with very careful permissions: > > - Write some shell scripts, one per action, to do what you need; > > - Audit those scripts for po

RE: Servlet that needs ROOT access

2006-08-01 Thread Peter Crowther
> From: Paul McMahon [mailto:[EMAIL PROTECTED] > The servlet application needs to do things like mkfs, > vgcfgrestore, vgchange, > mount and umount. I'd use setuid scripts with very careful permissions: - Write some shell scripts, one per action, to do what you need; - Audit those scripts for

Re: Servlet that needs ROOT access

2006-08-01 Thread Paul McMahon
omcat as non ROOT, > > but have a servlet that needs ROOT access? > > No. > > > Or is the solution to have the servlet application code > > running as a separate > > daemon outside tomcat, with some form of comms to tomcat > > servlet when tasks need to

RE: Servlet that needs ROOT access

2006-08-01 Thread Peter Crowther
> From: Paul McMahon [mailto:[EMAIL PROTECTED] > Is it possible to run Tomcat as non ROOT, > but have a servlet that needs ROOT access? No. > Or is the solution to have the servlet application code > running as a separate > daemon outside tomcat, with some form of comms to

Re: Servlet that needs ROOT access

2006-08-01 Thread David Smith
long as you have very tight control over what commands are executed that way. --David Paul McMahon wrote: Is it possible to run Tomcat as non ROOT (desirable as I see from FAQs/other threads), but have a servlet that needs ROOT access? Or is the solution to have the servlet application

Re: Servlet that needs ROOT access

2006-08-01 Thread Li
n > > Not sure whether it is what you are asking.. > > On 8/1/06, Paul McMahon <[EMAIL PROTECTED]> wrote: > > Is it possible to run Tomcat as non ROOT (desirable as I see from > > FAQs/other threads), but have a servlet that needs ROOT access? > > > > Or is

Re: Servlet that needs ROOT access

2006-08-01 Thread Paul McMahon
n 8/1/06, Paul McMahon <[EMAIL PROTECTED]> wrote: > > Is it possible to run Tomcat as non ROOT (desirable as I see from > > FAQs/other threads), but have a servlet that needs ROOT access? > > > > Or is the solution to have the servlet application code running a

Re: Servlet that needs ROOT access

2006-08-01 Thread Li
her it is what you are asking.. On 8/1/06, Paul McMahon <[EMAIL PROTECTED]> wrote: Is it possible to run Tomcat as non ROOT (desirable as I see from FAQs/other threads), but have a servlet that needs ROOT access? Or is the solution to have the servlet application code running as a separate

Servlet that needs ROOT access

2006-08-01 Thread Paul McMahon
Is it possible to run Tomcat as non ROOT (desirable as I see from FAQs/other threads), but have a servlet that needs ROOT access? Or is the solution to have the servlet application code running as a separate daemon outside tomcat, with some form of comms to tomcat servlet when tasks need to be