You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by op...@garage.co.jp on 2003/08/19 03:56:13 UTC

Run RPM packaged Tomcat as non-root

I am working on an old system where an RPM package of Tomcat 3.2.3-1 is
being installed.  I found out that it runs as root.  Can anybody tell me
how to change it such that it runs as the user "tomcat" or any user that
is non-root.
--
Rey


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Run RPM packaged Tomcat as non-root

Posted by Stuart MacKenzie <to...@iarad.com>.
I think that on most Linux/Unix system, and port < 1024 is going to be
considered priv. and requires root to start.  Try using 800 or 8080 or
something similar.

                   + Stuart A. MacKenzie + http://www.iarad.com +

On Tue, 19 Aug 2003, John Turner wrote:

> 
> Depends on how the system is setup.
> 
> If Tomcat is running on port 80, it must run as root.
> 
> If Tomcat is not running on port 80, then simply switch to another user 
> account (or log in as a user other than root) and start up Tomcat.
> 
> You can also try using Apache with a connector, or other solutions like 
> iptables or other port forwarding solutiosn, or even the Jakarta Commons 
> sandbox daemon.
> 
> This is covered extensively in the list archives, the topic comes up 
> frequently.
> 
> http://jakarta.apache.org/tomcat/faq/security.html#root
> http://www.klawitter.de/tomcat80.html
> 
> John
> 
> operate@garage.co.jp wrote:
> 
> > I am working on an old system where an RPM package of Tomcat 3.2.3-1 is
> > being installed.  I found out that it runs as root.  Can anybody tell me
> > how to change it such that it runs as the user "tomcat" or any user that
> > is non-root.
> > --
> > Rey
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> > 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 
> 


Re: Run RPM packaged Tomcat as non-root

Posted by Stuart MacKenzie <to...@iarad.com>.
I think that on most Linux/Unix system, and port < 1024 is going to be
considered priv. and requires root to start.  Try using 800 or 8080 or
something similar.

                   + Stuart A. MacKenzie + http://www.iarad.com +

On Tue, 19 Aug 2003, John Turner wrote:

> 
> Depends on how the system is setup.
> 
> If Tomcat is running on port 80, it must run as root.
> 
> If Tomcat is not running on port 80, then simply switch to another user 
> account (or log in as a user other than root) and start up Tomcat.
> 
> You can also try using Apache with a connector, or other solutions like 
> iptables or other port forwarding solutiosn, or even the Jakarta Commons 
> sandbox daemon.
> 
> This is covered extensively in the list archives, the topic comes up 
> frequently.
> 
> http://jakarta.apache.org/tomcat/faq/security.html#root
> http://www.klawitter.de/tomcat80.html
> 
> John
> 
> operate@garage.co.jp wrote:
> 
> > I am working on an old system where an RPM package of Tomcat 3.2.3-1 is
> > being installed.  I found out that it runs as root.  Can anybody tell me
> > how to change it such that it runs as the user "tomcat" or any user that
> > is non-root.
> > --
> > Rey
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> > 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Re: Run RPM packaged Tomcat as non-root

Posted by John Turner <to...@johnturner.com>.
Depends on how the system is setup.

If Tomcat is running on port 80, it must run as root.

If Tomcat is not running on port 80, then simply switch to another user 
account (or log in as a user other than root) and start up Tomcat.

You can also try using Apache with a connector, or other solutions like 
iptables or other port forwarding solutiosn, or even the Jakarta Commons 
sandbox daemon.

This is covered extensively in the list archives, the topic comes up 
frequently.

http://jakarta.apache.org/tomcat/faq/security.html#root
http://www.klawitter.de/tomcat80.html

John

operate@garage.co.jp wrote:

> I am working on an old system where an RPM package of Tomcat 3.2.3-1 is
> being installed.  I found out that it runs as root.  Can anybody tell me
> how to change it such that it runs as the user "tomcat" or any user that
> is non-root.
> --
> Rey
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 



Re: Run RPM packaged Tomcat as non-root

Posted by John Turner <to...@johnturner.com>.
Depends on how the system is setup.

If Tomcat is running on port 80, it must run as root.

If Tomcat is not running on port 80, then simply switch to another user 
account (or log in as a user other than root) and start up Tomcat.

You can also try using Apache with a connector, or other solutions like 
iptables or other port forwarding solutiosn, or even the Jakarta Commons 
sandbox daemon.

This is covered extensively in the list archives, the topic comes up 
frequently.

http://jakarta.apache.org/tomcat/faq/security.html#root
http://www.klawitter.de/tomcat80.html

John

operate@garage.co.jp wrote:

> I am working on an old system where an RPM package of Tomcat 3.2.3-1 is
> being installed.  I found out that it runs as root.  Can anybody tell me
> how to change it such that it runs as the user "tomcat" or any user that
> is non-root.
> --
> Rey
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org