Tomcat running as root?

Is it normal for Tomcat to run as root? I was just tinkering around with it and noticed when it expanded a .war file that all the files were owned by root and it appears top confirms that a process might be running under root. Shouldn't these be run under the individual accounts GID/UID or can it be setup this way similar to phpsuexec and suexec or at least run as nobody? It seems running as root might cause some security issues.

Also, I haven't checked this yet, but do the WEB-INF and subfolders need to be owned by whoever is running the process (I guess in this case root unless it can be changed) or can it be chmodded?

 

 

 

 

Top