RE: Tomcat on port 80 or Java as root

["Martin Gil" <mgil () osinerg gob pe>]

You may use a diferent user as "www" for change it edit the httpd.conf
file.
But for run the services you must do it with root account (for use port
restrictions) and then you see the httpd process run with the "www"
account.



-----Mensaje original-----
De: Rajkumar S [mailto:listuser () myrealbox com] 
Enviado el: Jueves, 11 de Marzo de 2004 10:43 a.m.
Para: webappsec () securityfocus com
Asunto: Tomcat on port 80 or Java as root

Hi,

What are the implications of running tomcat as root(ie to run tomcat on 
port 80) Is java secure enough to run as root, or should I run some 
thing like apache in front ?

How about having Tux as a front end? Is it advisable from a security 
point of view?

with warm regards,

raj