• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
  • Campbell Ritchie
  • Devaka Cooray
  • Knute Snortum
  • Paul Clapham
  • Tim Cooke
  • Liutauras Vilda
  • Jeanne Boyarsky
  • Bear Bibeault
Saloon Keepers:
  • Tim Moores
  • Stephan van Hulst
  • Ron McLeod
  • Piet Souris
  • Frits Walraven
  • Ganesh Patekar
  • Tim Holloway
  • salvin francis

Performance and Security in Tomcat's Debug Mode in production  RSS feed

Posts: 3
Firefox Browser Java Windows
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator

Recently i was looking for a tool to make easily the deploy of bug fixes in production, and i have found the ClassGhost utility (http://classghost.sourceforge.net/). This tool injects classes in the production JVM. It looks pretty good, and does the work very well.

But, to do this job, the ClassGhost needs some parameters in the JVM. These parameters, in Tomcat, are related with the Debug mode (as you can see in this http://classghost.sourceforge.net/how.html and this http://wiki.apache.org/tomcat/FAQ/Developing links).

My question is: what do you think about enable debug mode of Tomcat in production? Did you do something like this? Please, i want to listen your considerations.

Posts: 20739
Android Eclipse IDE Java Linux Redhat Tomcat Server
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Be careful. The JVM debugger cannot be switched on and off on the fly, which means that it's available at all times, and it's not protected by any sort of security system. If an intruder can gain debug access, they can browse and even alter sensitive memory, gain insight into possible application logic flaws, and generally wreak havoc.
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!