postinst is in tomcat7 7.0.68-1.
This file is a maintainer script. It is executed when installing (*inst) or removing (*rm) the package.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 | #!/bin/sh
set -e
. /usr/share/debconf/confmodule
TEMPLATE="/usr/share/tomcat7/defaults.template"
CONFFILE="/etc/default/tomcat7"
LR_TEMPLATE="/usr/share/tomcat7/logrotate.template"
LR_CONFFILE="/etc/logrotate.d/tomcat7"
JAVA_OPTS="-Djava.awt.headless=true -Xmx128m -XX:+UseConcMarkSweepGC"
case "$1" in
configure)
# Generate $CONFFILE from debconf seetings and $TEMPLATE
db_version 2.0
db_get tomcat7/username && TOMCAT7_USER="$RET" || TOMCAT7_USER="tomcat7"
db_get tomcat7/groupname && TOMCAT7_GROUP="$RET" || TOMCAT7_GROUP="tomcat7"
db_get tomcat7/javaopts && JAVA_OPTS="$RET" || JAVA_OPTS="-Djava.awt.headless=true -Xmx128m -XX:+UseConcMarkSweepGC"
tmpfile=`mktemp /tmp/tomcat7.XXXXXXXXXX`
chmod 644 $tmpfile
cat $TEMPLATE \
| sed "s%^TOMCAT7_USER=.*$%TOMCAT7_USER=$TOMCAT7_USER%" \
| sed "s%^TOMCAT7_GROUP=.*$%TOMCAT7_GROUP=$TOMCAT7_GROUP%" \
| sed "s%^JAVA_OPTS=.*$%JAVA_OPTS=\"$JAVA_OPTS\"%" \
>> $tmpfile
ucf --debconf-ok --sum-file /usr/share/tomcat7/defaults.md5sum $tmpfile $CONFFILE
rm -f $tmpfile
if ! getent group "$TOMCAT7_GROUP" > /dev/null 2>&1 ; then
addgroup --system "$TOMCAT7_GROUP" --quiet
fi
if ! id $TOMCAT7_USER > /dev/null 2>&1 ; then
adduser --system --home /usr/share/tomcat7 --no-create-home \
--ingroup "$TOMCAT7_GROUP" --disabled-password --shell /bin/false \
"$TOMCAT7_USER"
fi
chown -R $TOMCAT7_USER:adm /var/log/tomcat7 /var/cache/tomcat7
chmod 750 /var/log/tomcat7 /var/cache/tomcat7
# populate /etc/logrotate.d/tomcat7
tmpfile=`mktemp /tmp/tomcat7.XXXXXXXXXX`
chmod 644 $tmpfile
cat $LR_TEMPLATE | sed "s%create 640 tomcat7 adm%create 640 $TOMCAT7_USER adm%" >> $tmpfile
ucf --debconf-ok --sum-file /usr/share/tomcat7/logrotate.md5sum $tmpfile $LR_CONFFILE
rm -f $tmpfile
# configuration files should not be modifiable by tomcat7 user, as this can be a security issue
# (an attacker may insert code in a webapp and have access to all tomcat configuration)
# but those files should be readable by tomcat7, so we set the group to tomcat7
chown -Rh root:$TOMCAT7_GROUP /etc/tomcat7/*
if [ -f /etc/tomcat7/tomcat-users.xml ] ; then
chmod 640 /etc/tomcat7/tomcat-users.xml
fi
chown -Rh $TOMCAT7_USER:$TOMCAT7_GROUP /var/lib/tomcat7/webapps /var/lib/tomcat7/common /var/lib/tomcat7/server /var/lib/tomcat7/shared
chmod 775 /var/lib/tomcat7/webapps
chmod 775 /etc/tomcat7/Catalina /etc/tomcat7/Catalina/localhost
# Authorize user tomcat7 to open privileged ports via authbind.
TOMCAT_UID="`id -u $TOMCAT7_USER`"
if [ ! -f "/etc/authbind/byuid/$TOMCAT_UID" ]; then
if [ ! -d "/etc/authbind/byuid" ]; then
mkdir -p /etc/authbind/byuid
chmod 755 /etc/authbind
chmod 755 /etc/authbind/byuid
fi
echo '0.0.0.0/0:1,1023' >/etc/authbind/byuid/$TOMCAT_UID
echo '::/0,1-1023' >>/etc/authbind/byuid/$TOMCAT_UID
chown $TOMCAT7_USER:$TOMCAT7_GROUP /etc/authbind/byuid/$TOMCAT_UID
chmod 700 /etc/authbind/byuid/$TOMCAT_UID
fi
;;
esac
if [ ! -d /var/lib/tomcat7/webapps/ROOT ]; then
cp -r /usr/share/tomcat7-root/default_root /var/lib/tomcat7/webapps/ROOT
fi
# Automatically added by dh_installinit
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ]; then
if [ -x "/etc/init.d/tomcat7" ]; then
update-rc.d tomcat7 defaults >/dev/null
fi
if [ -x "/etc/init.d/tomcat7" ] || [ -e "/etc/init/tomcat7.conf" ]; then
invoke-rc.d tomcat7 start || exit $?
fi
fi
# End automatically added section
|