Focus on Sun
Sun Application Server Drop Privs Apr 24 2007 12:11AM
Crist J. Clark (cristclark comcast net) (3 replies)
Re: Sun Application Server Drop Privs Apr 25 2007 12:41PM
haim [howard] roman (roman jct ac il) (1 replies)
Regarding (b), even if you run the server as root, you can change the
owners &/or groups of the files so that non-root users can change them.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Haim (Howard) Roman
Computer Center, Jerusalem College of Technology
roman (at) jct.ac (dot) il [email concealed]
Phone: 052-8-592-599 (6022 from within Machon Lev)

-------- Original Message --------
Subject: Sun Application Server Drop Privs
From: Crist J. Clark <cristclark (at) comcast (dot) net [email concealed]>
To: focus-sun (at) securityfocus (dot) com [email concealed]
Date: Tue 24 Apr 2007 03:11:02 AM IDT
> We're using Sun Java System Application Server 8.1. I know
> the software is designed so it can be run as a non-root user,
> but right now, we have to run it as root since it binds to ports
> 80/tcp and 443/tcp.
>
> I've hit SunSolve, docs.sun.com, and Google, but can't seem to
> find out how to get it to drop privs to a non-root user after
> grabbing the low-numbered ports. Anyone know how to do this?
> I'd rather (a) not have this monster run as root if it doesn't
> have to and (b) not have the web app developers have to get a
> sys admin to make changes as root for them whenever they want
> to tweak some file.
>

[ reply ]
Re: Sun Application Server Drop Privs Apr 26 2007 10:54AM
Alexander Klimov (alserkli inbox ru)
RE: Sun Application Server Drop Privs Apr 24 2007 03:41PM
Tony UcedaVelez (tonyuv versprite com)
Re: Sun Application Server Drop Privs Apr 24 2007 03:36PM
Stephen Hauskins (stephen acg ucsc edu)


 

Privacy Statement
Copyright 2010, SecurityFocus