Re: security audit

Attila,

Thanks for the quick explanation of Java security policies.  It's still not
immediately obvious to me how to configure this, but your email gives some
pointers.  As I understand it, this will require (A) some patching of the
Velocity source to implement Privileged Action and (B) editing the
catalina.policy file in my Tomcat conf directory.  Does this seem about
right?

Guess I'm going to have to do some more research in this area.

WILL

Attila:

> There is no need to split Velocity into two JARs. As a person who wrote
> several security-aware apps
_______________________________________
Forio Business Simulations
Will Glass-Husain
(415) 440-7500 phone
(415) 235-4293 mobile

wglass@xxxxxxxxx
www.forio.com