https://bugzilla.novell.com/show_bug.cgi?id=424675 User mvyskocil@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=424675#c2 Michal Vyskocil changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |INVALID --- Comment #2 from Michal Vyskocil 2009-03-16 03:49:40 MST --- This change was rejected for security reasons. The writable /etc/tomcat6 will brings a possible security hole and the context.xml should be read from [1] $CATALINA_BASE/webapps/[webappname]/META-INF/context.xml which is owned by application. Only one file writable in /etc/tomcat6 is tomcat-users.xml. [1] http://tomcat.apache.org/tomcat-6.0-doc/deployer-howto.html -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=424675 User mvyskocil@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=424675#c4 Michal Vyskocil changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |REOPENED Resolution|INVALID | --- Comment #4 from Michal Vyskocil 2009-03-16 08:05:35 MST --- You're right. The documentation of tomcat is little bit unclear about it. But still there are two main problems with a proper fix: 1.) Giving write access to /etc/tomcat6 for user tomcat is a security risk, because application would be allowed to change a server configuration. 2.) /etc is not intended for deploying of files, just for static configuration, according FHS. My proposal is create a symlink /etc/tomcat6/Catalina /var/cache/tomcat6/Catalina, so deployed context.xml files will be stored in the same directory as .java and .class files built from JSP. l /etc/tomcat6/Catalina lrwxrwxrwx 1 root root 27 2009-03-16 15:02 /etc/tomcat6/Catalina -> /var/cache/tomcat6/Catalina/ So tomcat will be able to write a files to $CATALINA_BASE/conf/Catalina/localhost -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=424675 User sebastianklenk@visions-tec.de added comment https://bugzilla.novell.com/show_bug.cgi?id=424675#c6 Sebastian Klenk changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |REOPENED Info Provider|sebastianklenk@visions-tec. | |de | --- Comment #6 from Sebastian Klenk 2009-03-17 03:45:58 MST --- Sounds good to me! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.