https://bugzilla.redhat.com/show_bug.cgi?id=1376712
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|60915,reported=20160915,sou |60915,reported=20160915,sou
|rce=bugtraq,cvss2=6.9/AV:L/ |rce=bugtraq,cvss2=6.9/AV:L/
|AC:M/Au:N/C:C/I:C/A:C,cvss3 |AC:M/Au:N/C:C/I:C/A:C,cvss3
|=7.0/CVSS:3.0/AV:L/AC:H/PR: |=7.0/CVSS:3.0/AV:L/AC:H/PR:
|L/UI:N/S:U/C:H/I:H/A:H,cwe= |L/UI:N/S:U/C:H/I:H/A:H,cwe=
|CWE-284,rhel-5/tomcat5=new, |CWE-284,rhel-5/tomcat5=nota
|rhel-6/tomcat6=new,rhel-7/t |ffected,rhel-6/tomcat6=nota
|omcat=new,fedora-all/tomcat |ffected,rhel-7/tomcat=notaf
|=affected,epel-6/tomcat=aff |fected,fedora-all/tomcat=no
|ected,dts-3.1/devtoolset-3- |taffected,epel-6/tomcat=aff
|tomcat=new,rhscl-2/rh-java- |ected,dts-3.1/devtoolset-3-
|common-tomcat=new,jbews-2/t |tomcat=notaffected,rhscl-2/
|omcat6=new,jbews-2/tomcat7= |rh-java-common-tomcat=notaf
|new,jbews-3/tomcat6=new,jbe |fected,jbews-2/tomcat6=new,
|ws-3/tomcat7=new,eap-6/tomc |jbews-2/tomcat7=new,jbews-3
|at7=new,eap-6/jbossweb=new, |/tomcat6=new,jbews-3/tomcat
|eap-7/Scripts=new,jdg-6/jbo |7=new,eap-6/tomcat7=new,eap
|ssweb=new,jdv-6/jbossweb=ne |-6/jbossweb=new,eap-7/Scrip
|w,jon-3/jbossweb=new,jpp-6/ |ts=new,jdg-6/jbossweb=new,j
|jbossweb=new,openshift-1/jb |dv-6/jbossweb=new,jon-3/jbo
|ossweb=new |ssweb=new,jpp-6/jbossweb=ne
| |w,openshift-1/jbossweb=new
--- Comment #7 from Tomas Hoger <thoger(a)redhat.com> ---
As noted above, Tomcat init scripts in Red Hat Enterprise Linux 5 and 6 do not
attempt to chown catalina.out in a directory writeable to the tomcat user.
Tomcat packages in Red Hat Enterprise Linux 7 do not use init script, but use
systemd service unit file. There are no ownership changed done on Tomcat
startup, and any start/stop actions for Tomcat on Red Hat Enterprise Linux 7
are executed directly under tomcat user and group and not with root privileges.
Hence Tomcat in Red Hat Enterprise Linux 7 is also unaffected.
Note that EPEL-6 tomcat packages are affected by this problem.
--
You are receiving this mail because:
You are on the CC list for the bug.