Thanks to Solaris 10 privileges you can run web servers that have to bind to port privileged ports as non-root users. This is one of the first things I did with my Webserver 7 setup. The internet is a dangerous place.

Add the privilege:

# usermod -K defaultpriv=basic,net_privaddr webservd

su to webservd and start the process. Wait.. no need to do this if you are running this under SMF. Here’s my SMF for Sun Java System Web 7 (http instance only, not admin server).

UPDATE: After testing this with SMF, its kind of annoying. Sun Java System Web uses a “watchdog” process that will restart the web processes if they get killed. If you kill the web processes, they restart fine through watchdog. If you kill the watchdog process, SMF picks it up the kill but can’t restart it because its already gone. It would be nice to be able to disable this watchdog process. I wonder if anyone has got this to work.. a search around google reveals nothing.

This entry was posted on Saturday, July 7th, 2007 at 1:39 am and is filed under Sun Java Web/Apache, General. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.