You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tomee.apache.org by "rzo1 (via GitHub)" <gi...@apache.org> on 2026/10/07 19:06:14 UTC

[PR] Keep Debian package configuration read-only for the service group (tomee)

rzo1 opened a new pull request, #3071:
URL: https://github.com/apache/tomee/pull/3071

   postinst made /etc/tomee-* and the catalina base group-writable, while the service runs in that group, so application code could rewrite server.xml or tomcat-users.xml. Configuration is now root:apachetomee and group-readable only; logs, work, temp and webapps stay writable. Administrators edit the configuration as root or via sudo, which should go into the release notes.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@tomee.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] Keep Debian package configuration read-only for the service group (tomee)

Posted by "rzo1 (via GitHub)" <gi...@apache.org>.
rzo1 merged PR #3071:
URL: https://github.com/apache/tomee/pull/3071


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@tomee.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org