510364 – OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x000003110d000000, 2555904, 1) failed; error='Permission denied' (errno=13)

Bug 510364 - OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x000003110d000000, 2555904, 1) failed; error='Permission denied' (errno=13)

Summary: OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x000003110d000000,...

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	SELinux (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Sven Vermeulen (RETIRED)

URL:
Whiteboard:	sec-policy r3
Keywords:

Depends on:
Blocks:

Reported:	2014-05-15 00:36 UTC by R030t1
Modified:	2014-08-01 21:18 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Autogenerated error file. (file_510364.txt,22.43 KB, text/plain) 2014-05-15 00:36 UTC, R030t1	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description R030t1 2014-05-15 00:36:18 UTC

Created attachment 376950 [details]
Autogenerated error file.

Java VM fails to start. I will work on getting a set of AVC denials if they are needed, but what fixed the issue was relabeling /usr/lib64/icedtea7/bin/java to java_exec_t and setting allow_java_execstack to on.

This probably affects every binary in that directory. Had to apply the new label to javac as well.

Comment 1 Sven Vermeulen (RETIRED) gentoo-dev

2014-05-17 15:29:16 UTC

Thanks, patch sent upstream so it can be pulled in easily.

I've also added USE=selinux dependencies in icedtea(-bin)

Comment 2 Sven Vermeulen (RETIRED) gentoo-dev

2014-05-22 17:02:02 UTC

Applied upstream and in our policy, will be in rev 3

Comment 3 Sven Vermeulen (RETIRED) gentoo-dev

2014-05-29 20:09:56 UTC

r3 is in tree, ~arch

Comment 4 Sven Vermeulen (RETIRED) gentoo-dev

2014-08-01 21:18:39 UTC

r3 is stabilized