Bug#935203: tomcat9: systemd configuration fails to allow tomcat to write to it's own directory

[Kit Haines]

Package: tomcat9
Version: 9.0.16-4~bpo9+1
Severity: normal

Dear Maintainer,

I'm trying to install tomcat9, and run it as a service.  After purging
and reinstalling, tomcat9 fails to start.  I had expected it to start.

`root at gelfly:/var/lib/tomcat9# service tomcat9 restart
Job for tomcat9.service failed because the control process exited with error code.
See "systemctl status tomcat9.service" and "journalctl -xe" for details.`

I expected the prompt to simply return, and tomcat9 to be running.

I editted: `/etc/systemd/system/multi-user.target.wants/tomcat9.service`
to add the following two lines:
`ReadWritePaths=/etc/tomcat9/
ReadWritePaths=/var/lib/tomcat9/`

When I then ran

`root at gelfly:/var/lib/tomcat9/conf# systemctl daemon-reload
root at gelfly:/var/lib/tomcat9/conf# service tomcat9 restart
root at gelfly:/var/lib/tomcat9/conf#`

The service started.

-- System Information:
Debian Release: 9.9
  APT prefers oldstable
  APT policy: (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-9-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages tomcat9 depends on:
ii  lsb-base        9.20161125
ii  systemd         232-25+deb9u11
ii  tomcat9-common  9.0.16-4~bpo9+1
ii  ucf             3.0036

Versions of packages tomcat9 recommends:
pn  libtcnative-1  <none>

Versions of packages tomcat9 suggests:
pn  tomcat9-admin     <none>
ii  tomcat9-docs      9.0.16-4~bpo9+1
ii  tomcat9-examples  9.0.16-4~bpo9+1
pn  tomcat9-user      <none>

-- Configuration Files:
/etc/tomcat9/policy.d/01system.policy [Errno 13] Permission denied: '/etc/tomcat9/policy.d/01system.policy'
/etc/tomcat9/policy.d/02debian.policy [Errno 13] Permission denied: '/etc/tomcat9/policy.d/02debian.policy'
/etc/tomcat9/policy.d/03catalina.policy [Errno 13] Permission denied: '/etc/tomcat9/policy.d/03catalina.policy'
/etc/tomcat9/policy.d/04webapps.policy [Errno 13] Permission denied: '/etc/tomcat9/policy.d/04webapps.policy'
/etc/tomcat9/policy.d/50local.policy [Errno 13] Permission denied: '/etc/tomcat9/policy.d/50local.policy'

-- no debconf information