Chapter 14: Tomcat Security On Windows systems, the
Chapter 14: Tomcat Security On Windows systems, the command is quite similar: > TOMCAT_INSTALLATIONbincatalina start -security Tomcat s Policy File Tomcat uses the $CATALINA_HOME/conf/catalina.policyfile to determine its own permissions and those of its Web applications. What follows is the file as of Tomcat 6. Note that it is divided into three sections: system code permissions, Catalina code permissions, and Web application code permissions. System Code Permissions Tomcat s policy file grants all permissions to the javactool, which is used to compile JSPs into servlets, and grants all permissions to any Java standard extensions. Four grant lines are used instead of two to deal with multiple path possibilities. Note that administrators may need to add additional grants to this section if the JRE used to run Tomcat uses different paths for its standard extensions (such as Mac OS X) and Tomcat Web applications are using JARs or classes in those paths. // ========== SYSTEM CODE PERMISSIONS ========================================= // These permissions apply to javac grant codeBase file:${java.home}/lib/- { permission java.security.AllPermission; }; // These permissions apply to all shared system extensions grant codeBase file:${java.home}/jre/lib/ext/- { permission java.security.AllPermission; }; // These permissions apply to javac when ${java.home] points at $JAVA_HOME/jre grant codeBase file:${java.home}/../lib/- { permission java.security.AllPermission; }; // These permissions apply to all shared system extensions when // ${java.home} points at $JAVA_HOME/jre grant codeBase file:${java.home}/lib/ext/- { permission java.security.AllPermission; }; Catalina Code Permissions Note that Catalina grants all permissions to the following: . Tomcat s startup classes ( ${catalina.home}/bin/commons-daemon.jarand ${catalina .home}/bin/bootstrap.jar) . Classes from the logging API ( ${catalina.home}/bin/tomcat-juli.jar) . Shared files between class loaders ( $CATALINA/lib) // These permissions apply to the daemon code grant codeBase file:${catalina.home}/bin/commons-daemon.jar { permission java.security.AllPermission; }; (continued)
If you looking for unlimited one inclusive web hosting plan please check unlimited web hosting website.