Re: [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities

On Son, 2008-01-06 at 20:14 +0100, Bernd Eckenfels wrote:
> In article <1199525586.8906.7.camel@localhost> you wrote:
> > (java.io.FilePermission
> > /home/nihil/www/java/WEB-INF/classes/logging.properties read)
>
> > (it worked before the update and permission are set correctly, i double checked)
>
> This is a java security policy violation, not related to OS file
> permissions. Maybe you started it with security policy and did not before?
>
> Gruss
> Bernd
>
>

no init.d script always starts with security manager enabled. and I am sure because I had to write java policy for access e.g. my database.

-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org