tomcat on port 80 as user www:ww

[Marc van Kempen]

Roberto Nunnari wrote:
> Hello.
> 
> just a question:
> 
> What about running jakarta-tomcat4.1 as user www:www on port 80?
> I don't need apache, so I run tomcat on port 80, but I can only
> run it as root...
> 
> Any known security issues with running jakarta-tomcat4.1 as user root?
> 
> Best regards.

Just run a port forwarder from 80 (ipfw can do it too) to 8080 (or whereever Tomcat lives). That way 
you don't have to trust it at all.

Regards,
Marc.

-- 
----------------------------------------------------
Marc van Kempen               tel. +31 40 2 64 98 60
BowTie Technology             fax. +31 40 2 64 98 61
Raiffeisenstraat 7             mailto:marc at bowtie.nl
5611 CH  Eindhoven              http://www.bowtie.nl
----------------------------------------------------