pki-servlet-engine/tomcat6-6.0-tomcat-users-webapp.patch

--- conf/tomcat-users.xml~	2008-01-28 17:41:06.000000000 -0500
+++ conf/tomcat-users.xml	2008-03-07 19:40:07.000000000 -0500
@@ -23,4 +23,9 @@
   <user username="both" password="tomcat" roles="tomcat,role1"/>
   <user username="role1" password="tomcat" roles="role1"/>
 -->
+
+<!-- The host manager webapp is restricted to users with role "admin" -->
+<!--<user name="tomcat" password="password" roles="admin" />-->
+<!-- The manager webapp is restricted to users with role "manager" -->
+<!--<user name="tomcat" password="password" roles="manager" />-->
 </tomcat-users>
- 6.0.18 - Resolves: CVE-2008-1232, CVE-2008-1947, CVE-2008-2370, CVE-2008-2938 - fix definition of java.security.policy with d%%{name} start-security - don't pass $CATALINA_OPTS with d%%{name} stop - redefine tempdir and workdir for tmpwatch workaround - change eclipse-ecj references to ecj 2008-09-05 17:14:04 +00:00			`--- conf/tomcat-users.xml~ 2008-01-28 17:41:06.000000000 -0500`
			`+++ conf/tomcat-users.xml 2008-03-07 19:40:07.000000000 -0500`
initial import of 6.0.16-1jpp.7%{?dist} (rhbz #435829) 2008-04-07 22:37:26 +00:00			`@@ -23,4 +23,9 @@`
			`<user username="both" password="tomcat" roles="tomcat,role1"/>`
			`<user username="role1" password="tomcat" roles="role1"/>`
			`-->`
			`+`
			`+<!-- The host manager webapp is restricted to users with role "admin" -->`
			`+<!--<user name="tomcat" password="password" roles="admin" />-->`
			`+<!-- The manager webapp is restricted to users with role "manager" -->`
			`+<!--<user name="tomcat" password="password" roles="manager" />-->`
			`</tomcat-users>`