Focus on Sun
Sun Application Server Drop Privs Apr 24 2007 12:11AM
Crist J. Clark (cristclark comcast net) (3 replies)
Re: Sun Application Server Drop Privs Apr 25 2007 12:41PM
haim [howard] roman (roman jct ac il) (1 replies)
Re: Sun Application Server Drop Privs Apr 26 2007 10:54AM
Alexander Klimov (alserkli inbox ru)
RE: Sun Application Server Drop Privs Apr 24 2007 03:41PM
Tony UcedaVelez (tonyuv versprite com)
Re: Sun Application Server Drop Privs Apr 24 2007 03:36PM
Stephen Hauskins (stephen acg ucsc edu)


If the main issue is your webservers then what should happen
is that the initial run as root should get reassigned to
the webserver owner, i.e. nobody, web, etc.

Stephen Hauskins
Divisional Liaison
Academic Computing Group
Division of Physical and Biological Sciences

We can't solve problems by using the same kind of thinking we used
when we created them. Albert Einstein

On Mon, 23 Apr 2007, Crist J. Clark wrote:

> We're using Sun Java System Application Server 8.1. I know
> the software is designed so it can be run as a non-root user,
> but right now, we have to run it as root since it binds to ports
> 80/tcp and 443/tcp.
>
> I've hit SunSolve, docs.sun.com, and Google, but can't seem to
> find out how to get it to drop privs to a non-root user after
> grabbing the low-numbered ports. Anyone know how to do this?
> I'd rather (a) not have this monster run as root if it doesn't
> have to and (b) not have the web app developers have to get a
> sys admin to make changes as root for them whenever they want
> to tweak some file.
> --
> Crist J. Clark | cjclark (at) alum.mit (dot) edu [email concealed]
>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus