Re: JSP Servlet container / WEB server

[Mohan Embar <gnustuff at thisiscool dot com>]

Hi Erik,

>What about standard Un*x practices for securing web servers? Webservers increasingly
>run on Linux. Windows deployments rather work with IIS and wouldn't go for this
>approach anyway.

I don't know that Windows and IIS are necessarily synonymous. Don't have any
hard and fast statistics on this though. If someone made me run a webserver on
Windows, I'd choose Tomcat inside a chroot jail inside of RedHat inside of
a VMWare virtual machine on Windows.

(Okay, I know we're horribly off topic now, but I can't help sharing this with you all
so you know where my heart is. (Anyway, it's Sunday.) I was having breakfast with
this top Microsoft consultant and explaining to him what a chroot jail was. He
said "IIS can do that too. You can't go any higher than the root folder." I then
reexplained to him what it was and he seemed pretty impressed.)

>That would require replicating important parts of the OS at the programming
>language-level, as done in the JDK. Is that really the way to go?

It depends on which OS. I see the two as complementary and personally feel
very nice about running a Java webserver on Linux inside a chroot jail, for example.

-- Mohan
http://www.thisiscool.com/
http://www.animalsong.org/