From owner-freebsd-java@FreeBSD.ORG Mon May 26 07:49:58 2003 Return-Path: Delivered-To: freebsd-java@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8417337B401 for ; Mon, 26 May 2003 07:49:58 -0700 (PDT) Received: from eowyn.vianetworks.nl (eowyn.vianetworks.nl [212.61.25.227]) by mx1.FreeBSD.org (Postfix) with ESMTP id 83B3343F3F for ; Mon, 26 May 2003 07:49:57 -0700 (PDT) (envelope-from marc@bowtie.nl) Received: from nietzsche.intra.bowtie.nl (p14229165.net.upc.nl [212.142.29.165]) by eowyn.vianetworks.nl (Postfix) with ESMTP id 5093E20FC0 for ; Mon, 26 May 2003 16:49:55 +0200 (CEST) Received: from bowtie.nl (euripides.intra.bowtie.nl [192.168.4.15]) h4QDJmBK044357; Mon, 26 May 2003 15:19:50 +0200 (CEST) (envelope-from marc@bowtie.nl) Message-ID: <3ED21473.9020506@bowtie.nl> Date: Mon, 26 May 2003 15:19:47 +0200 From: Marc van Kempen Organization: BowTie Technology User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.4b) Gecko/20030509 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Roberto Nunnari References: <3ED20627.6090308@die.supsi.ch> In-Reply-To: <3ED20627.6090308@die.supsi.ch> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-java@freebsd.org Subject: Re: tomcat on port 80 as user www:ww X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 May 2003 14:49:58 -0000 Roberto Nunnari wrote: > Hello. > > just a question: > > What about running jakarta-tomcat4.1 as user www:www on port 80? > I don't need apache, so I run tomcat on port 80, but I can only > run it as root... > > Any known security issues with running jakarta-tomcat4.1 as user root? > > Best regards. Just run a port forwarder from 80 (ipfw can do it too) to 8080 (or whereever Tomcat lives). That way you don't have to trust it at all. Regards, Marc. -- ---------------------------------------------------- Marc van Kempen tel. +31 40 2 64 98 60 BowTie Technology fax. +31 40 2 64 98 61 Raiffeisenstraat 7 mailto:marc@bowtie.nl 5611 CH Eindhoven http://www.bowtie.nl ----------------------------------------------------