| 22:42.02 | *** join/#tomcat ibot (~ibot@rikers.org) |
| 22:42.03 | *** topic/#tomcat is Stable versions: 6.0.29, 5.5.31. Newbies use the official binary from tomcat.apache.org, an RPM from http://www.webdroid.org/archives/tomcat-package, or the latest tomcat6 testing deb. Check logs before you ask a question. SLOW MOTION CHANNEL (we all have jobs & kids): Ask your question including your TC, Java, & OS versions, then wait; check back often for answers. |
| 23:06.03 | *** join/#tomcat ` (~a@dynamic-adsl-94-37-1-52.clienti.tiscali.it) |
| 23:06.14 | *** part/#tomcat ` (~a@dynamic-adsl-94-37-1-52.clienti.tiscali.it) |
| 23:06.44 | LzrdKing | BWAHAHAHA i just killed a drupal install! |
| 23:06.45 | LzrdKing | time to go home for the weekend! |
| 23:10.10 | jasonb | AJC_Z0: Yeah, I'm not sure that the stock catalina.policy file could still work if you're splitting CATALINA_BASE from CATALINA_HOME. |
| 23:12.02 | jasonb | AJC_Z0: Looks like it would need some modifications, and the sections that need to be changed are commented out in the stock catalina.policy file. It's probably conveniently easy to uncomment those.. |
| 23:14.50 | *** join/#tomcat iredux (~michaelg@mail2.creditcards.com) |
| 23:40.00 | AJC_Z0 | jasonb: Thanks. I was hoping to add something like : grant codeBase "file:${catalina.base}/foo/bar/-" {permission java.security.AllPermission;}; |
| 23:40.47 | AJC_Z0 | Think that might work? [Alas I can't just try it and find out form myself] |
| 23:42.47 | AJC_Z0 | AFAICT none of the commented sections along would cover this in one easy statement, but I got all my clues from the existing entries including the commented parts |
| 23:43.56 | jasonb | Well, if you're trying to set up a secure sandbox, you'll want to grant only those permissions that your webapps require, and no more than that. It's possible to make security manager errors go away by granting AllPermission, but doing that mostly defeats the purpose of having the security manager enabled. |