deny_execmem Rhel7

Tim.Einmahl at kba.de Tim.Einmahl at kba.de
Mon Jun 22 06:48:46 UTC 2015


Hi,

in Rhel6 there was a SElinux-type called java_exec_t, so it was possible to use allow_execmem set to off but to run java without problems if it was labeled correctly.

In Rhel7 the type java_exec_t seems to have gone so setting deny_execmem leads to problems running java. But I don't want to set deny_execmem globally.
Any idea how to achieve that?


Regards
Tim

 


More information about the selinux mailing list