Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.java.programmer > #4549

Re: File uploaded under 'nobody' uid on linux

From "John B. Matthews" <nospam@nospam.invalid>
Newsgroups comp.lang.java.programmer
Subject Re: File uploaded under 'nobody' uid on linux
Date 2011-05-24 17:42 -0400
Organization The Wasteland
Message-ID <nospam-684751.17425224052011@news.aioe.org> (permalink)
References (2 earlier) <ir34lt$eqj$1@news.albasani.net> <nospam-9D2A2B.20511619052011@news.aioe.org> <ir4iih$fos$1@news.albasani.net> <14bf3bb1-dd67-4157-a8a2-ffbe1fad1559@e26g2000vbz.googlegroups.com> <irg733$633$1@news.albasani.net>

Show all headers | View raw


In article <irg733$633$1@news.albasani.net>, Lew <noone@lewscanon.com> 
wrote:

> ruds wrote:
> > Tomcat is being run under root user. But my file location are in 
> > another users home and it is in root group. So, I cannot use suExec 
> > as it does not allow root goup users to run the program. I'm still 
> > not able to understand how does files get uploaded under nobody'd 
> > uid?
> >
> > Please help.
> 
> It has already been suggested that you not run Tomcat under root 
> user.  It has been proffered that that is possibly why it's using 
> "nobody" as the user.  Did you try that solution?
> 
> To refresh your memory:
> 
> ruds wrote:
> >> So isn't Tomcat running under root?
> 
> Nigel Wade wrote:
> > That would be exceedingly dangerous. Maybe Tomcat has changed its 
> > effective UID to "nobody" to avoid those dangers.
> 
> Let us know how that works for you, something you have not done so far.

ruds: It would also help to clarify the goal as it relates to security, 
e.g. one user v. many, known user(s) v. unknown, etc.

-- 
John B. Matthews
trashgod at gmail dot com
<http://sites.google.com/site/drjohnbmatthews>

Back to comp.lang.java.programmer | Previous | NextPrevious in thread | Find similar


Thread

File uploaded under 'nobody' uid on linux ruds <rudranee@gmail.com> - 2011-05-18 01:12 -0700
  Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-18 13:17 -0400
    Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-18 13:17 -0400
      Re: File uploaded under 'nobody' uid on linux ruds <rudranee@gmail.com> - 2011-05-18 21:53 -0700
        Re: File uploaded under 'nobody' uid on linux Nigel Wade <nmw-news@ion.le.ac.uk> - 2011-05-19 10:09 +0100
  Re: File uploaded under 'nobody' uid on linux Lawrence D'Oliveiro <ldo@geek-central.gen.new_zealand> - 2011-05-19 21:50 +1200
    Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-19 09:07 -0400
      Re: File uploaded under 'nobody' uid on linux "John B. Matthews" <nospam@nospam.invalid> - 2011-05-19 20:51 -0400
        Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-19 22:10 -0400
          Re: File uploaded under 'nobody' uid on linux "John B. Matthews" <nospam@nospam.invalid> - 2011-05-20 00:16 -0400
          Re: File uploaded under 'nobody' uid on linux ruds <rudranee@gmail.com> - 2011-05-24 01:15 -0700
            Re: File uploaded under 'nobody' uid on linux Lew <noone@lewscanon.com> - 2011-05-24 08:08 -0400
              Re: File uploaded under 'nobody' uid on linux "John B. Matthews" <nospam@nospam.invalid> - 2011-05-24 17:42 -0400

csiph-web