Why run tomcat as root

[Sanjaya Singharage <Sa...@jkcs.slt.lk>]

with respect to security what is the best way to run tomcat on linux? I am
running tomcat3.2.3 with apache1.3.26 and mod_jk
1. Run as root?
2. Run as nobody?
3.Run as other user (eg. tomcat)?

why is running tomcat as a certain user more secure than running it as
others?
If this is the appropriate place to ask a question on apache and tomcat,
what would be the answer to the same question regarding running apache and
tomcat together.

thanx.





--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>

Re: Why run tomcat as root

[Tim Funk <fu...@joedog.org>]

Run apache as one id (nobody?)
Run tomcat as another id (tomcat?)

Running as root ... dangerous.

Sanjaya Singharage wrote:
> with respect to security what is the best way to run tomcat on linux? I am
> running tomcat3.2.3 with apache1.3.26 and mod_jk
> 1. Run as root?
> 2. Run as nobody?
> 3.Run as other user (eg. tomcat)?
> 
> why is running tomcat as a certain user more secure than running it as
> others?
> If this is the appropriate place to ask a question on apache and tomcat,
> what would be the answer to the same question regarding running apache and
> tomcat together.
> 
> thanx.
> 


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>