RE: [cobalt-developers] Tomcat permissions

["alpo" <alpo@xxxxxxxxxxxxxxxxxx>]

Hi,

Need you use /var/tmp or /var/temp directory? You wrote /var/tmp in your
message and /var/temp in FilePermission. Check it, here may be simple
misspelling error. 
Anyway, it is not good idea to allow cient's applications write and
delete files located outside of theirs web site directory..... Your /var
partition is not unlimited on hard disk space and you cannot be sure
that client's application will be clean up temporary files from /var
directory, at least. Ask your client to use temp directory inside his
web space and you don't need any additional permissions.

Regards,
Alexander Povargo
YourNewHosting.com
alpo@xxxxxxxxxxxxxxxxxx
http://www.yournewhosting.com
ICQ 25639843

> -----Original Message-----
> From: cobalt-developers-admin@xxxxxxxxxxxxxxx 
> [mailto:cobalt-developers-admin@xxxxxxxxxxxxxxx] On Behalf Of 
> Mike Atlee
> Sent: Saturday, December 01, 2001 4:53 AM
> To: cobalt-developers@xxxxxxxxxxxxxxx
> Subject: [cobalt-developers] Tomcat permissions
> 
> 
> #A client of mine is trying to upload files to a website that is using
> #tomcat/java on an RAQ4.  He is getting a permission error 
> when writing to
> #the /var/tmp directory.  I added the following line to
> #tomcat.policy.www.website.com:
> 
> #permission java.io.FilePermission "/var/temp/-", "read,write,delete";
> 
> #It still is giving us the following error.
> 
> #Error: 500
> #Location: /itemAdd.do
> #Internal Servlet Error:
> 
> #java.lang.SecurityException: Unable to create temporary file
> #at java.io.File.checkAndCreate(File.java:1159)
> #at java.io.File.createTempFile(File.java:1247)
> #at
> #org.apache.struts.upload.MultipartIterator.createLocalFile(Mu
ltipartIterato
> r
> #.java:481)
> #at
> #org.apache.struts.upload.MultipartIterator.getNextElement(Mul
tipartIterator
>