Question about world writable files
I don't know a lot about Java but was required to run a security test on a solaris machine with jre installed on it. Some of the files were found to be world writable (against one of the security polices). an example file is /jre/lib/sparc/native_threads/libjpeg.so
The owner of this file is the web server. Would a webserver need to change/write to this type of file? What exactly is a .so file? Is it possible this file doesn't need to be worldwritable?