debian/changelog

+tomcat9 (9.0.16-3) unstable; urgency=medium
+
+  * Removed read/write access to /var/lib/solr (Closes: #923299)
+  * Removed the broken catalina-ws.jar and catalina-jmx-remote.jar
+    symlinks in /usr/share/tomcat9/lib/
+
+ -- Emmanuel Bourg <ebourg@apache.org>  Tue, 26 Feb 2019 09:31:13 +0100
+
 tomcat9 (9.0.16-2) unstable; urgency=medium
 
   * Team upload.

debian/tomcat9-common.links

@@ -3,8 +3,6 @@
 /usr/share/java/tomcat9-catalina.jar             /usr/share/tomcat9/lib/catalina.jar
 /usr/share/java/tomcat9-catalina-ant.jar         /usr/share/tomcat9/lib/catalina-ant.jar
 /usr/share/java/tomcat9-catalina-ha.jar          /usr/share/tomcat9/lib/catalina-ha.jar
-/usr/share/java/tomcat9-catalina-jmx-remote.jar  /usr/share/tomcat9/lib/catalina-jmx-remote.jar
-/usr/share/java/tomcat9-catalina-ws.jar          /usr/share/tomcat9/lib/catalina-ws.jar
 /usr/share/java/tomcat9-coyote.jar               /usr/share/tomcat9/lib/tomcat-coyote.jar
 /usr/share/java/tomcat9-dbcp.jar                 /usr/share/tomcat9/lib/tomcat-dbcp.jar
 /usr/share/java/tomcat9-el-api.jar               /usr/share/tomcat9/lib/el-api.jar

debian/tomcat9.service

@@ -39,7 +39,6 @@ CacheDirectoryMode=750
 ProtectSystem=strict
 ReadWritePaths=/etc/tomcat9/Catalina/
 ReadWritePaths=/var/lib/tomcat9/webapps/
-ReadWritePaths=/var/lib/solr/
 
 [Install]
 WantedBy=multi-user.target