SELinux denied errors seen on start up of jws5

Solution In Progress - Updated -

Issue

  • SELinux errors are seen on starting the jws5 tomcat service:
type=PROCTITLE msg=audit(11/10/19 07:15:15.029:563) : proctitle=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.222.b10-1.el7_7.x86_64/jre/bin/java -classpath /opt/rh/jws5/root/usr/share/tomcat/bin/boot 
type=SYSCALL msg=audit(11/10/19 07:15:15.029:563) : arch=x86_64 syscall=open success=no exit=EACCES(Permission denied) a0=0x7f16551ace90 a1=O_RDONLY a2=0x1b6 a3=0x24 items=0 ppid=1 pid=3941 auid=unset uid=tomcat gid=tomcat euid=tomcat suid=tomcat fsuid=tomcat egid=tomcat sgid=tomcat fsgid=tomcat tty=(none) ses=unset comm=java exe=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.222.b10-1.el7_7.x86_64/jre/bin/java subj=system_u:system_r:jws5_tomcat_t:s0 key=(null) 
type=AVC msg=audit(11/10/19 07:15:15.029:563) : avc:  denied  { search } for  pid=3941 comm=java name=/ dev="cgroup" ino=6774 scontext=system_u:system_r:jws5_tomcat_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir 

Environment

  • RHEL 7.x
  • Red Hat JBoss Web Server 5.1.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In