« Return to Thread: Re: [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities

Re: [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities

by Nihil-2 :: Rate this Message:

On Son, 2008-01-06 at 20:14 +0100, Bernd Eckenfels wrote:

> In article <1199525586.8906.7.camel@localhost> you wrote:
> > (java.io.FilePermission
> > /home/nihil/www/java/WEB-INF/classes/logging.properties read)
>
> > (it worked before the update and permission are set correctly, i double checked)
>
> This is a java security policy violation, not related to OS file
> permissions. Maybe you started it with security policy and did not before?
>
> Gruss
> Bernd
>
>

no init.d script always starts with security manager enabled. and I am
sure because I had to write java policy for access e.g. my database.

--
To UNSUBSCRIBE, email to debian-security-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

« Return to Thread: Re: [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities