| Summary: | OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x000003110d000000, 2555904, 1) failed; error='Permission denied' (errno=13) | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | R030t1 |
| Component: | SELinux | Assignee: | Sven Vermeulen (RETIRED) <swift> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | selinux |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | sec-policy r3 | ||
| Package list: | Runtime testing required: | --- | |
| Attachments: | Autogenerated error file. | ||
Thanks, patch sent upstream so it can be pulled in easily. I've also added USE=selinux dependencies in icedtea(-bin) Applied upstream and in our policy, will be in rev 3 r3 is in tree, ~arch r3 is stabilized |
Created attachment 376950 [details] Autogenerated error file. Java VM fails to start. I will work on getting a set of AVC denials if they are needed, but what fixed the issue was relabeling /usr/lib64/icedtea7/bin/java to java_exec_t and setting allow_java_execstack to on. This probably affects every binary in that directory. Had to apply the new label to javac as well.