Re: [Php-java-bridge-users] Debian's security manager

I'm sorry to interrupt, but I would be happy if you check now what files
really
are necessary to be enabled instead of opening a security hole for everyone.

thanks.


2009/4/29 <php...@li...>

> I think java.lang.AllPermissions is a good start then.
> TOMCAT_HOME/lib has AllPermissions, too.
>
> Regards,
> Jost Boekemeier
>
> Apr 29, 2009 10:33 nachm. schrieb am <
> php...@li...>:
>
> <3af...@ma...>
> <200...@te...>
> <3af...@ma...>
> <3af...@ma...> <
> 3af...@ma...>
> Message-ID: <ef694f0b3cfec3015febb4fe6e11ef83@localhost>
>
> X-Sender: and...@te...
>
> Received: from 161.148.54.70 [161.148.54.70] with HTTP/1.1 (POST); Wed, 29
> Apr
>       2009 09:34:29 -0300
>
> User-Agent: RoundCube Webmail/0.1 Content-Type: text/plain; charset="UTF-8"
> Content-Transfer-Encoding: 8bit
>
>
> Hello,
>
> I will verify what are the JSP permissions.
>
> Debian Policy does not allow a package manipulate configuration files
>
> from other packages.
>
> Because of this, the right way is to create a new own file at policy.d
>
> directory
>
> I tested
>
> /etc/tomcat5.5/policy.d/60JavaBridge.policy
>
>
>
> containing:
>
> grant codeBase "file:${catalina.base}/webapps/JavaBridge/-" {
> permission java.security.AllPermission;
>
> };
>
>
>
> And it worked well after restarting tomcat.
>
> I simply placed the war file at the autodeploy dir and automagically all
>
> worked.
>
>
>
> I will try to create a new package using the debconf tools for manipulating
>
> the new
>
> file and test it.
>
> Regards.
>
> Andre Felipe
>
>
>
>
>
>
>
>
>
>
>
> On Wed, 29 Apr 2009 22:22:26 +0200,
>
> php...@li... wrote: > I think PHP should
> have
> the same permissions ...
> --
>
> http://www.techforce.com.br
> A Debian user never dies. Issues a last command:
>
> #shutdown -h now
>
>
> ------------------------------------------------------------------------------
> Register Now & Save...
>
> php...@li...
> https://lists.sourceforge.net/lists/listinfo/php-java-br...
>
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations
> Conference from O'Reilly Media. Velocity features a full day of
> expert-led, hands-on workshops and two days of sessions from industry
> leaders in dedicated Performance & Operations tracks. Use code vel09scf
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> php-java-bridge-users mailing list
> php...@li...
> https://lists.sourceforge.net/lists/listinfo/php-java-bridge-users
>