>> It is labelled correctly (java_exec_t), but I still needed >> "setsebool -P allow_execstack 1". > > It's worth checking the Firefox context too. > > Allowing execstack everywhere isn't such a great idea. OK, this works too and is narrower in scope: chcon -t execmem_exec_t /usr/lib64/firefox-3.6/firefox - Mike