Re: Sun Application Server Drop Privs

Regarding (b), even if you run the server as root, you can change the
owners &/or groups of the files so that non-root users can change them.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Haim (Howard) Roman
Computer Center, Jerusalem College of Technology
roman@jct.ac.il
Phone: 052-8-592-599 (6022 from within Machon Lev)



-------- Original Message  --------
Subject: Sun Application Server Drop Privs
From: Crist J. Clark <cristclark@comcast.net>
To: focus-sun@securityfocus.com
Date: Tue 24 Apr 2007 03:11:02 AM IDT
> We're using Sun Java System Application Server 8.1. I know
> the software is designed so it can be run as a non-root user,
> but right now, we have to run it as root since it binds to ports
> 80/tcp and 443/tcp.
>
> I've hit SunSolve, docs.sun.com, and Google, but can't seem to
> find out how to get it to drop privs to a non-root user after
> grabbing the low-numbered ports. Anyone know how to do this?
> I'd rather (a) not have this monster run as root if it doesn't
> have to and (b) not have the web app developers have to get a
> sys admin to make changes as root for them whenever they want
> to tweak some file.
>