From owner-freebsd-security  Tue May 14  1:34:39 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mail2.zrz.tu-berlin.de (mail2.zrz.TU-Berlin.DE [130.149.4.14])
	by hub.freebsd.org (Postfix) with ESMTP id 5B02137B407
	for <freebsd-security@freebsd.org>; Tue, 14 May 2002 01:34:36 -0700 (PDT)
Received: from p-164-213.zrz.tu-berlin.de ([130.149.164.213] helo=math.tu-berlin.de)
	  by mail2.zrz.tu-berlin.de with esmtp (exim-3.36)
	  id 177XlT-0005kD-00; Tue, 14 May 2002 10:34:35 +0200
Received: from localhost (petros@localhost)
	by math.tu-berlin.de (8.9.3/8.9.3) with ESMTP id KAA07370;
	Tue, 14 May 2002 10:35:04 +0200 (CEST)
	(envelope-from peter.ross@alumni.tu-berlin.de)
X-Authentication-Warning: sorchen.zrz.tu-berlin.de: petros owned process doing -bs
Date: Tue, 14 May 2002 10:35:04 +0200 (CEST)
From: Peter Ross <peter.ross@alumni.tu-berlin.de>
X-Sender: petros@sorchen.zrz.tu-berlin.de
To: Jens Rehsack <rehsack@liwing.de>
Cc: Gunnar Flygt <flygt@sr.se>, freebsd-security@freebsd.org
Subject: Re: Secure installation of Apache on 4.5
In-Reply-To: <3CE0BCE8.D6B258F3@liwing.de>
Message-ID: <Pine.BSF.4.21.0205140955260.338-100000@sorchen.zrz.tu-berlin.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hi,

On Tue, 14 May 2002, Jens Rehsack wrote:

> Gunnar Flygt wrote:
> > 
> > What would be an secure approach to running Apache with Java-Tomcat on a
> > FreeBSD 4.5 (or higher)
> ..
> 
> With Tomcat I do not have any expirience, sorry.

I installed tomcat 3.x by using the binary from jakarte.apache.org.
Unfortunetely there is no reasonable separation between configuration
files and runtime files needing writeable access (created when tomcat
starts).

$TOMCATHOME/conf resides in /var (writeable and noexec), configuration
files are linked to $TOMCATHOME/etc (in /usr), webapps to /home/tomcat..

It isn't a masterpiece but it works.

I didn't try tomcat 4.x. Hope for progress;)

Peter Ross


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message