You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Sam Seaver <sa...@hotmail.com> on 2003/04/16 22:00:17 UTC

Catalina.policy format & security

I have in my WEB-INF/lib a jar file that produces this error:

java.security.AccessControlException: access denied (java.io.FilePermission 
/usr/local/jakarta-tomcat-4.1.12/webapps/monster/jobs read)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:270)
        at 
java.security.AccessController.checkPermission(AccessController.java:401)
        at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:887)
        at java.io.File.isDirectory(File.java:698)
        at com.oreilly.servlet.multipart.FilePart.writeTo(FilePart.java:152)
.....................

the file is cos.jar from servlets.com

I have this permission in my catalina.policy file:

grant codeBase 
"file:/usr/local/jakarta-tomcat-4.1.12/webapps/monster/WEB-INF/lib/cos.jar"{

	permission java.io.FilePermission 
"/usr/local/jakarta-tomcat-4.1.12/webapps/monster/jobs", "read";
	permission java.io.FilePermission 
"/usr/local/jakarta-tomcat-4.1.12/webapps/monster/jobs/-", "read";
};

but i keep getting the above error! Can anyone enlighten me? I run Tomcat as 
user 'tomcat', does this have any effect? The folder 'monster/jobs' is owned 
by 'tomcat' too.

thanks
S

_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.  
http://join.msn.com/?page=features/virus


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org