php-java-bridge-users Mailing List for PHP/Java Bridge

Hello,
There is a new Debian package at CVS repository head.
It is not a new JavaBridge version, but packaging improvements.
The new JavaBridge TomCat 5.5 security policy should be correctly
installed now at a Debian Lenny fresh install.
The JavaBridge should run with TomCat 5.5 security enabled at 
/etc/default/tomcat5.5 (it is the Debian/Ubuntu default configuration
anyway).
Debian package installation scripts were improved.
SE Linux policy installation procedure is the same already at cvs since
last week.
Please, checkout, compile and test at a Debian 5.x ****test machine****.
Do not deploy it at a production environment.
It "should" compile and install at an Ubuntu one too.
Remember that that JavaBridge TomCat 5.5 rules are not enough to protect
a server. SE Linux should be used for that. Please, contribute better
rules to the project.
Please, send comments to the php-java-bridge-users list.
Regards.
Andre Felipe Machado
http://www.techforce.com.br

Hello, Jost
Thanks for your hints.
Actually, the Debian Policy for packaging imposes FHS compliance.
So, the JavaBridge must be installed at TomCat webapps directory.
The system directories are for official libraries.
But studying the tomcat system security policies (per your hints) helped
to improve the /etc/tomcat5.5/policy.d/60JavaBridge.policy file. 
Juli logging was not configured and prevented startup.
The # comment sign was not recognized at that file at a Debian Lenny
clean install .
Improved the rule cross platform portability. 
Improved the installation script sequence.
The file ownership and permissions were wrong, preventing startup.
So, packaging improvements were made to address these issues.
Even configuring TomCat error logging does not show startup errors
at /var/log/tomcat5.5/...
This kind of TomCat startup errors were logged at /var/log/syslog

I commited changes to CVS head today.
Regards.
Andre Felipe Machado
http://www.techforce.com.br