Once she made tracked changes I have again corrected it in openoffice and save and had problems since I don't know for the comments from my supervisor I would believe she uses microsoft word but dont know for sure. The openoffice server should be able to accept connections from any other process on the system given that it is listening on localhost, per the "socket,host=127.0.0.1,port=8100 urp " setting.Slavka wrote:From my part it was always written up and saved in otd. The latter could potentially happen, in theory, because the OpenOffice server is running as same user as the Java web conainer. If someone "hacks" via the OpenOffice server importer, at best they'll be able to get it to write some data into /home/ooserv, but it will not be able to change which web-apps are deployed on your server. 'ooserv' in the example above, should be the only user able to write in /home/ooserv and be the user running the OpenOffice server. That's why tomcat runs on port 8080 or 8000 and you use Apache httpd and mod_jk etc to provide a "secure" front for Java that sysadmins have approved for use on privileged ports like port 80.Īlso, by the principle of least priviledge and reduction of overlapping concerns, low privilege users such as 'tomcat' should only be able to write to a very specific part of the filesystem. By the "principle of least privilege" we want Java/Web-Container stuff running as a low-priv user (100 IMHO, it would be a significant improvement if the OpenOffice server could run as a different user than the one which runs the web-container, such as 'tomcat' on fedora 10.
0 kommentar(er)
