Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #4336

Re: File uploaded under 'nobody' uid on linux

Show all headers | View raw

In article <ir4iih$fos$1@news.albasani.net>, Lew <noone@lewscanon.com> 
wrote:

> John B. Matthews wrote:
> > Lew wrote:
> >> Lawrence D'Oliveiro wrote:
> >>> ruds wrote:
> >>>> Now, please tell me what should I do so that whenever files are 
> >>>> uploaded they are stored with the user's name where all code and 
> >>>> other files are stored.
> >>>
> >>> On way is to activate this mechanism
> >>> <http://httpd.apache.org/docs/current/suexec.html>.
> 
> >> The OP has not stated that he's using httpd.
> 
> > Lew: This point is well taken, but the article _does_ outline the 
> > (myriad) security issues that ruds should consider.
> >
> > ruds: If you don't use httpd/suEXEC, you're likely going to have to 
> > create something similar.
> 
> I use Tomcat a lot.  I always run it as a non-privileged user, with 
> the installation directory tree under that same user's ownership.  
> This "nobody" issue has never arisen under that configuration for me.
> 
> I also run it as a multi-instance installation
> <http://tomcat.apache.org/tomcat-6.0-doc/introduction.html>
> <http://tomcat.apache.org/tomcat-7.0-doc/introduction.html>
> "Optionally, Tomcat may be configured for multiple instances by 
> defining $CATALINA_BASE for each instance."
> 
> One useful approach is to set CATALINA_BASE to $HOME/.tomcat or 
> similar directory within the home directory of each designated Tomcat 
> user.
> 
> See the section "Advanced Configuration - Multiple Tomcat Instances" 
> in the $CATALINA_HOME/RUNNING.txt file.

I like this; thank you for the pointer.

-- 
John B. Matthews
trashgod at gmail dot com
<http://sites.google.com/site/drjohnbmatthews>

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

File uploaded under 'nobody' uid on linux ruds <rudranee@gmail.com> - 2011-05-18 01:12 -0700
  Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-18 13:17 -0400
    Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-18 13:17 -0400
      Re: File uploaded under 'nobody' uid on linux ruds <rudranee@gmail.com> - 2011-05-18 21:53 -0700
        Re: File uploaded under 'nobody' uid on linux Nigel Wade <nmw-news@ion.le.ac.uk> - 2011-05-19 10:09 +0100
  Re: File uploaded under 'nobody' uid on linux Lawrence D'Oliveiro <ldo@geek-central.gen.new_zealand> - 2011-05-19 21:50 +1200
    Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-19 09:07 -0400
      Re: File uploaded under 'nobody' uid on linux "John B. Matthews" <nospam@nospam.invalid> - 2011-05-19 20:51 -0400
        Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-19 22:10 -0400
          Re: File uploaded under 'nobody' uid on linux "John B. Matthews" <nospam@nospam.invalid> - 2011-05-20 00:16 -0400
          Re: File uploaded under 'nobody' uid on linux ruds <rudranee@gmail.com> - 2011-05-24 01:15 -0700
            Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-24 08:08 -0400
              Re: File uploaded under 'nobody' uid on linux "John B. Matthews" <nospam@nospam.invalid> - 2011-05-24 17:42 -0400

csiph-web