It seems that the etc/rc.d/tomcat start-up script distributed with the
www/apache-tomcat55 package simply executes tomcat.  In the
traditional setup of rc.d scripts, this means that tomcat is running
as root.

Would it be desirable to modify the tomcat package to do the
following:

- create a tomcat user/group

- install files using the tomcat user/group

- su to the tomcat user before executing tomcat

These seem like reasonable changes to the setup, but perhaps others do
not share my concern of running tomcat as root or have another
solution..

Cheers,
Brook