Linux Permissions & Tomcat Creating Files

[Mark van Wyk]

Hi guys,

Any ideas on this issue.

Tomcat is running on our server (I think) as user "tomcat" group "tomcat". The date files in our web application are stored as user "sportsfan" group "tomcat".

This is necessary so that our user uploading as "sportsfan" can FTP up and down the files, and Tomcat can read it.

When Tomcat creates a file, it saves it as "tomcat" "tomcat", which means that FTP user "sportsfan" can no longer access it.

Any ideas?

How would I get Tomcat to save the file as "sportsfan" "tomcat"?

Thanks,

--

Mark van Wyk

Email: ma...@foxbomb.com

Mobile: 082 831 9227

Landline: 021 789 1427

"Before printing this email, please consider the animals and eat less of them"

[Mike]

On 29/09/2011 17:31, Mark van Wyk wrote:

> How would I get Tomcat to save the file as "sportsfan" "tomcat"?

Run Tomcat as user "sportsfan" or "root".

--
mike morris :: mikro2nd (at) gmail (dot) com

http://mikro2nd.net/
http://mikro2nd.net/blog/planb/
http://mikro2nd.net/blog/mike/

This email is [X]bloggable [ ]ask-first [ ]private

[Fritz Meissner]

Not strictly speaking what you asked but what about running a script that CHMODs the files after creation by Tomcat but before the FTP user?

I guess that adds a point of failure, but you don't have to change the user that runs Tomcat that way.

Fritz

--
You received this message because you are subscribed to the Google Groups "CTJUG Forum" group.
To post to this group, send email to CTJUG...@googlegroups.com
To unsubscribe from this group, send email to CTJUG-Forum...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/CTJUG-Forum
For the ctjug home page see http://www.ctjug.org.za
For jobs see http://jobs.gamatam.com/

[Mark van Wyk]

Wow! I like that. Gonna check it out. Thanks for the idea!

[andrea...@gmail.com]

You could also change the file create mask so that group read and write is set whenever a file is created.

Andrea

Sent from my BlackBerry® wireless device

---

From: Mark van Wyk <ma...@foxbomb.com>

Sender: ctjug...@googlegroups.com

Date: Thu, 29 Sep 2011 21:12:42 +0200

To: <ctjug...@googlegroups.com>

ReplyTo: ctjug...@googlegroups.com

Subject: Re: [CTJUG Forum] Linux Permissions & Tomcat Creating Files

[Gavin Goldsmith]

Hi

 

> Tomcat is running on our server (I think) as user "tomcat" group "tomcat".

> The date files in our web application are stored as user "sportsfan" group "tomcat".

> This is necessary so that our user uploading as "sportsfan" can FTP up and down the files,

>  and Tomcat can read it.

> 

> When Tomcat creates a file, it saves it as "tomcat" "tomcat", which means that FTP user

>  "sportsfan" can no longer access it. How would I get Tomcat to save the file as "sportsfan" "tomcat"?

> 

 

There are a few options here:

1)      Have your code change the owner of the file after you’ve created – the UNIX/Linux  command is CHOWN

2)      Add the user sportsfan to the group tomcat. If the default mask of the file permissions allows sportsfan reads

& writes of the file then  sportsfan will be able to read it. Otherwise you may need to change the permission to (CHMOD).

3)      There’s one last, archane (but potentially useful) option. The use of the SUID and SGID permissions on the DIRECTORY (the bits mean something different on files!).

 

The choice of solution will depend directly on the security requirements, e.g. is the FTP server accessible via the internet? Is security a risk? You may want to change both the owner and group (CHGRP) of the file...

 

Gavin

Read our disclaimer at: http://www.picknpay.co.za/picknpay/content/en/disclaimer If you don't have web access, the disclaimer can be mailed to you on request. Disclaimer requests to be sent to it-se...@pnp.co.za

[Mark van Wyk]

Thanks gavin. Option 2 really makes sense to me.

:)

--

You received this message because you are subscribed to the Google Groups "CTJUG Forum" group.
To post to this group, send email to CTJUG...@googlegroups.com
To unsubscribe from this group, send email to CTJUG-Forum...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/CTJUG-Forum
For the ctjug home page see http://www.ctjug.org.za
For jobs see http://jobs.gamatam.com/